Lucene search
PostgreSQL Global Development GroupPOSTGRESQL:CVE-2010-1975HistoryMay 19, 2010 - 6:30 p.m.
Vulnerability in core server (CVE-2010-1975)
2010-05-1918:30:00
PostgreSQL Global Development Group
www.postgresql.org
585
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
0.003 Low
EPSS
Percentile
68.3%
An unprivileged database user can remove superuser-only
settings that were applied to his account with ALTER USER by a superuser, thus
bypassing settings that should be enforced.
| CPE | Name | Operator | Version |
|---|---|---|---|
| postgresql | lt | 8.0.25 | |
| postgresql | lt | 7.4.29 | |
| postgresql | lt | 8.1.21 | |
| postgresql | lt | 8.2.17 | |
| postgresql | lt | 8.3.11 | |
| postgresql | lt | 8.4.4 |
References
Related
seebug
seebug
PostgreSQL RESET ALL操作不安全权限检查漏洞
2010-05-21 00:00:00
openvas
openvas
PostgreSQL 'RESET ALL' Unauthorized Access Vulnerability
2010-05-21 00:00:00
Oracle: Security Advisory (ELSA-2010-0430)
2015-10-06 00:00:00
Ubuntu: Security Advisory (USN-942-1)
2010-05-28 00:00:00
cve
cve
CVE-2010-1975
2010-05-19 18:30:00
ubuntucve
ubuntucve
CVE-2010-1975
2010-05-18 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:48:53
prion
prion
Code injection
2010-05-19 18:30:00
oraclelinux
oraclelinux
postgresql84 security update
2010-05-19 00:00:00
postgresql security update
2010-05-19 00:00:00
postgresql security update
2010-05-19 00:00:00
nessus
nessus
RHEL 5 : postgresql84 (RHSA-2010:0430)
2010-05-20 00:00:00
PostgreSQL 7.4 < 7.4.29 / 8.0 < 8.0.25 / 8.1 < 8.1.21 / 8.2 < 8.2.17 / 8.3 < 8.3.11 / 8.4 < 8.4.4 Multiple Vulnerabilities
2012-12-28 00:00:00
Oracle Linux 5 : postgresql84 (ELSA-2010-0430)
2013-07-12 00:00:00
redhat
redhat
(RHSA-2010:0430) Moderate: postgresql84 security update
2010-05-19 00:00:00
(RHSA-2010:0428) Moderate: postgresql security update
2010-05-19 00:00:00
(RHSA-2010:0429) Moderate: postgresql security update
2010-05-19 00:00:00
centos
centos
postgresql84 security update
2010-05-28 10:47:00
postgresql security update
2010-05-21 22:22:02
postgresql security update
2010-05-28 10:45:13
debian
debian
[Backports-security-announce] Security Update for postgresql-8.4
2010-05-25 11:24:49
[Backports-security-announce] Security Update for postgresql-8.4
2010-05-25 11:30:45
ubuntu
ubuntu
PostgreSQL vulnerabilities
2010-05-21 00:00:00
osv
osv
postgresql-8.3 - several
2010-05-24 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2011-10-25 00:00:00
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
0.003 Low
EPSS
Percentile
68.3%
Related for POSTGRESQL:CVE-2010-1975