Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-1975
HistoryMay 18, 2010 - 12:00 a.m.

CVE-2010-1975

2010-05-1800:00:00
ubuntu.com
ubuntu.com
9

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

71.3%

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2
before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly
check privileges during certain RESET ALL operations, which allows remote
authenticated users to remove arbitrary parameter settings via a (1) ALTER
USER or (2) ALTER DATABASE statement.

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

71.3%