Lucene search
PostgreSQL Global Development GroupPOSTGRESQL:CVE-2007-2138HistoryApr 24, 2007 - 8:19 p.m.
Vulnerability in core server (CVE-2007-2138)
2007-04-2420:19:00
PostgreSQL Global Development Group
www.postgresql.org
47
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
64.2%
A vulnerability involving insecure search_path settings allows unprivileged users to gain the SQL privileges of the owner of any SECURITY DEFINER function they are allowed to call. Securing such a function requires both a software update and changes to the function definition.
| CPE | Name | Operator | Version |
|---|---|---|---|
| postgresql | lt | 7.3.19 | |
| postgresql | lt | 8.1.9 | |
| postgresql | lt | 8.0.13 | |
| postgresql | lt | 8.2.4 | |
| postgresql | lt | 7.4.17 |
References
Related
redhat
redhat
(RHSA-2007:0337) Moderate: postgresql security update
2007-05-03 00:00:00
(RHSA-2007:0336) Moderate: postgresql security update
2007-05-08 00:00:00
veracode
veracode
Untrusted Search Path
2020-04-10 00:13:56
openvas
openvas
Fedora Update for postgresql FEDORA-2007-0174
2009-02-27 00:00:00
Fedora Update for postgresql FEDORA-2007-565
2009-02-27 00:00:00
Debian: Security Advisory (DSA-1311-1)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 1311-1] New PostgreSQL 7.4 packages fix privilege escalation
2007-06-17 23:23:17
[SECURITY] [DSA 1309-1] New PostgreSQL 8.1 packages fix privilege escalation
2007-06-16 21:34:45
[SECURITY] [DLA-1874-1] postgresql-9.4 security update
2019-08-09 08:33:57
ubuntucve
ubuntucve
CVE-2007-2138
2007-04-24 00:00:00
nessus
nessus
Ubuntu 6.06 LTS / 6.10 / 7.04 : postgresql-8.1, postgresql-8.2 vulnerability (USN-454-1)
2007-11-10 00:00:00
CentOS 3 / 4 / 5 : postgresql (CESA-2007:0336)
2007-05-10 00:00:00
Scientific Linux Security Update : postgresql on on SL3.0.x i386/x86_64
2012-08-01 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: postgresql-8.2.4-1.fc7
2007-06-06 03:02:26
[SECURITY] Fedora Core 6 Update: postgresql-8.1.9-1.fc6
2007-06-06 17:22:21
[SECURITY] Fedora Core 5 Update: postgresql-8.1.9-1.fc5
2007-06-06 17:24:23
securityvulns
securityvulns
PostgreSQL privilege escalation
2007-04-24 00:00:00
rPSA-2007-0081-1 postgresql postgresql-server
2007-04-24 00:00:00
centos
centos
postgresql, rh security update
2007-05-08 16:27:32
gentoo
gentoo
PostgreSQL: Privilege escalation
2007-05-10 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerability
2007-04-27 00:00:00
prion
prion
Design/Logic Flaw
2007-04-24 20:19:00
cve
cve
CVE-2007-2138
2007-04-24 20:19:00
freebsd
freebsd
archlinux
archlinux
[ASA-201908-7] postgresql-libs: multiple issues
2019-08-10 00:00:00
[ASA-201908-8] postgresql: multiple issues
2019-08-10 00:00:00
oraclelinux
oraclelinux
Moderate: postgresql security update
2007-05-08 00:00:00
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
64.2%
Related for POSTGRESQL:CVE-2007-2138