A buffer overflow in the intarray module potentially allowed attackers to execute arbitrary code as the user running PostgreSQL (CVE-2010-4015: CVSS v2 Base Score: 4.9). Additionally a possible log forging problem was fixed too. (CVE-2010-4014)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-38:01 advisory.

    PostgreSQL is an advanced Object-Relational database management system (DBMS) that supports almost all SQL     constructs (including transactions, subselects and user-defined types and functions). The postgresql     package includes the client programs and libraries that you'll need to access a PostgreSQL DBMS server.
    These PostgreSQL client programs are programs that directly manipulate the internal structure of     PostgreSQL databases on a PostgreSQL server. These client programs can be located on the same machine with     the PostgreSQL server, or may be on a remote machine which accesses a PostgreSQL server over a network     connection. This package contains the docs in HTML for the whole package, as well as command-line     utilities for managing PostgreSQL databases on a PostgreSQL server.
    If you want to manipulate a PostgreSQL database on a remote PostgreSQL server, you need this package. You     also need to install this package if you're installing the postgresql-server package.
    Security issues fixed with this release:
    CVE-2010-4015     Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in     PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows     remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via     integers with a large number of digits to unspecified functions.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A buffer overflow in the intarray module potentially allowed attackers to execute arbitrary code as the user running postgresql (CVE-2010-4015:CVSS v2 Base Score: 4.9). Additionally a possible log forging problem was fixed too. (CVE-2010-4014)

According to the version of one or more Juniper NSM servers running on the remote host, it is potentially vulnerable to multiple vulnerabilities, the worst of which may allow an authenticated user to trigger a denial of service condition or execute arbitrary code.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0478 advisory.

    This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.2. It addresses 34 CVEs:
    CVE-2007-0555, CVE-2025-8714, CVE-2012-2655, CVE-2007-6067, CVE-2012-0867, and 29 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
53230	SuSE 11.1 Security Update : PostgreSQL (SAT Patch Number 3977)	Nessus	SuSE Local Security Checks	2011/3/31	2021/1/19	medium
283964	MiracleLinux 4 : postgresql-8.4.7-1.AXS4.1 (AXSA:2011-38:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
75713	openSUSE Security Update : postgresql (openSUSE-SU-2011:0254-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
69872	Juniper NSM Servers < 2012.1 Multiple Vulnerabilities	Nessus	Misc.	2013/9/13	2022/4/11	high
356309	Rocky Linux 9.2 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-contrib-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0478)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high

検出

プラグインの検索

medium

critical

medium

high

high