UbuntuUSN-1002-1PostgreSQL vulnerability
6.7 Medium
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.04 Low
EPSS
Percentile
92.0%
Releases
- Ubuntu 10.04
- Ubuntu 9.10
- Ubuntu 9.04
- Ubuntu 8.04
- Ubuntu 6.06
Packages
- postgresql-8.1 -
- postgresql-8.3 -
- postgresql-8.4 -
Details
It was discovered that PostgreSQL did not properly enforce permissions
within sessions when PL/Perl and PL/Tcl functions or operators were
redefined. A remote authenticated attacker could exploit this to execute
arbitrary code with permissions of a different user, possibly leading to
privilege escalation.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 9.10 | noarch | postgresql-pltcl-8.4 | < 8.4.5-0ubuntu9.10 | UNKNOWN |
| Ubuntu | 9.10 | noarch | libecpg-compat3 | < 8.4.5-0ubuntu9.10 | UNKNOWN |
| Ubuntu | 9.10 | noarch | libecpg-dev | < 8.4.5-0ubuntu9.10 | UNKNOWN |
| Ubuntu | 9.10 | noarch | libecpg6 | < 8.4.5-0ubuntu9.10 | UNKNOWN |
| Ubuntu | 9.10 | noarch | libpgtypes3 | < 8.4.5-0ubuntu9.10 | UNKNOWN |
| Ubuntu | 9.10 | noarch | libpq-dev | < 8.4.5-0ubuntu9.10 | UNKNOWN |
| Ubuntu | 9.10 | noarch | libpq5 | < 8.4.5-0ubuntu9.10 | UNKNOWN |
| Ubuntu | 9.10 | noarch | postgresql-8.4 | < 8.4.5-0ubuntu9.10 | UNKNOWN |
| Ubuntu | 9.10 | noarch | postgresql-client-8.4 | < 8.4.5-0ubuntu9.10 | UNKNOWN |
| Ubuntu | 9.10 | noarch | postgresql-contrib-8.4 | < 8.4.5-0ubuntu9.10 | UNKNOWN |
References
Related
6.7 Medium
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.04 Low
EPSS
Percentile
92.0%