Lucene search

K
postgresqlPostgreSQL Global Development GroupPOSTGRESQL:CVE-2007-6600
HistoryJan 09, 2008 - 9:46 p.m.

Vulnerability in core server (CVE-2007-6600)

2008-01-0921:46:00
PostgreSQL Global Development Group
www.postgresql.org
49

EPSS

0.006

Percentile

78.6%

Two vulnerabilities in how ANALYZE executes user defined functions that are part of expression indexes allows users to gain superuser privileges. A valid login that has permissions to create functions and tables is required to exploit this vulnearbility.