PostgreSQL Other Vulnerability - CVE-2009-4136 - Vulnerability Database

PostgreSQL Other Vulnerability - CVE-2009-4136

Medium

Reference: CVE-2009-4136

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2009-4136

Title: PostgreSQL Other Vulnerability

Overview:

PostgreSQL 7.4.x before 7.4.27 8.0.x before 8.0.23 8.1.x before 8.1.19 8.2.x before 8.2.15 8.3.x before 8.3.9 and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser which allows remote authenticated users to gain privileges via a table with crafted index functions as demonstrated by functions that modify (1) search_path or (2) a prepared statement a related issue to CVE-2007-6600 and CVE-2009-3230.