PostgreSQL privilege escalation

2006-02-16T00:00:00
ID SECURITYVULNS:VULN:5776
Type securityvulns
Reporter BUGTRAQ
Modified 2006-02-16T00:00:00

Description

With SET ROLE or SET SESSION AUTHORIZATION it's possible to elevate privileges to any database acccount, including superuser or cause database engine crash.