Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PostgreSQL Permissions Privileges and Access Controls Vulnerability - CVE-2009-3230 - Vulnerability Database
PostgreSQL

PostgreSQL Permissions Privileges and Access Controls Vulnerability - CVE-2009-3230

Medium
Reference: CVE-2009-3230
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2009-3230
Title: PostgreSQL Permissions Privileges and Access Controls Vulnerability
Overview:

The core server component in PostgreSQL 8.4 before 8.4.1 8.3 before 8.3.8 8.2 before 8.2.14 8.1 before 8.1.18 8.0 before 8.0.22 and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.