PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:40
Type | Values Removed | Values Added |
---|---|---|
References | () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154 - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html - | |
References | () http://secunia.com/advisories/28359 - Vendor Advisory | |
References | () http://secunia.com/advisories/28376 - Vendor Advisory | |
References | () http://secunia.com/advisories/28437 - Vendor Advisory | |
References | () http://secunia.com/advisories/28438 - Vendor Advisory | |
References | () http://secunia.com/advisories/28445 - Vendor Advisory | |
References | () http://secunia.com/advisories/28454 - Vendor Advisory | |
References | () http://secunia.com/advisories/28455 - Vendor Advisory | |
References | () http://secunia.com/advisories/28464 - Vendor Advisory | |
References | () http://secunia.com/advisories/28477 - Vendor Advisory | |
References | () http://secunia.com/advisories/28479 - Vendor Advisory | |
References | () http://secunia.com/advisories/28679 - Vendor Advisory | |
References | () http://secunia.com/advisories/28698 - Vendor Advisory | |
References | () http://secunia.com/advisories/29638 - Vendor Advisory | |
References | () http://security.gentoo.org/glsa/glsa-200801-15.xml - | |
References | () http://securitytracker.com/id?1019157 - | |
References | () http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1 - | |
References | () http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1 - | |
References | () http://www.debian.org/security/2008/dsa-1460 - | |
References | () http://www.debian.org/security/2008/dsa-1463 - | |
References | () http://www.mandriva.com/security/advisories?name=MDVSA-2008:004 - | |
References | () http://www.postgresql.org/about/news.905 - Patch, Vendor Advisory | |
References | () http://www.redhat.com/support/errata/RHSA-2008-0038.html - | |
References | () http://www.redhat.com/support/errata/RHSA-2008-0039.html - | |
References | () http://www.redhat.com/support/errata/RHSA-2008-0040.html - | |
References | () http://www.securityfocus.com/archive/1/485864/100/0/threaded - | |
References | () http://www.securityfocus.com/archive/1/486407/100/0/threaded - | |
References | () http://www.securityfocus.com/bid/27163 - Patch | |
References | () http://www.vupen.com/english/advisories/2008/0061 - | |
References | () http://www.vupen.com/english/advisories/2008/0109 - | |
References | () http://www.vupen.com/english/advisories/2008/1071/references - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/39496 - | |
References | () https://issues.rpath.com/browse/RPL-1768 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10493 - | |
References | () https://usn.ubuntu.com/568-1/ - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html - |
Information
Published : 2008-01-09 21:46
Updated : 2024-11-21 00:40
NVD link : CVE-2007-6600
Mitre link : CVE-2007-6600
CVE.ORG link : CVE-2007-6600
JSON object : View
Products Affected
postgresql
- postgresql
CWE
CWE-264
Permissions, Privileges, and Access Controls