6.5

CVE-2007-6600

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Postgresql ≫ Postgresql Version7.3
Postgresql ≫ Postgresql Version7.3.1
Postgresql ≫ Postgresql Version7.3.2
Postgresql ≫ Postgresql Version7.3.3
Postgresql ≫ Postgresql Version7.3.4
Postgresql ≫ Postgresql Version7.3.5
Postgresql ≫ Postgresql Version7.3.6
Postgresql ≫ Postgresql Version7.3.7
Postgresql ≫ Postgresql Version7.3.8
Postgresql ≫ Postgresql Version7.3.9
Postgresql ≫ Postgresql Version7.3.10
Postgresql ≫ Postgresql Version7.3.11
Postgresql ≫ Postgresql Version7.3.12
Postgresql ≫ Postgresql Version7.3.13
Postgresql ≫ Postgresql Version7.3.14
Postgresql ≫ Postgresql Version7.3.15
Postgresql ≫ Postgresql Version7.3.16
Postgresql ≫ Postgresql Version7.3.17
Postgresql ≫ Postgresql Version7.3.18
Postgresql ≫ Postgresql Version7.3.19
Postgresql ≫ Postgresql Version7.4
Postgresql ≫ Postgresql Version7.4.1
Postgresql ≫ Postgresql Version7.4.2
Postgresql ≫ Postgresql Version7.4.3
Postgresql ≫ Postgresql Version7.4.4
Postgresql ≫ Postgresql Version7.4.5
Postgresql ≫ Postgresql Version7.4.6
Postgresql ≫ Postgresql Version7.4.7
Postgresql ≫ Postgresql Version7.4.8
Postgresql ≫ Postgresql Version7.4.9
Postgresql ≫ Postgresql Version7.4.10
Postgresql ≫ Postgresql Version7.4.11
Postgresql ≫ Postgresql Version7.4.12
Postgresql ≫ Postgresql Version7.4.13
Postgresql ≫ Postgresql Version7.4.14
Postgresql ≫ Postgresql Version7.4.16
Postgresql ≫ Postgresql Version7.4.17
Postgresql ≫ Postgresql Version7.4.18
Postgresql ≫ Postgresql Version8.0
Postgresql ≫ Postgresql Version8.0.0
Postgresql ≫ Postgresql Version8.0.1
Postgresql ≫ Postgresql Version8.0.2
Postgresql ≫ Postgresql Version8.0.3
Postgresql ≫ Postgresql Version8.0.4
Postgresql ≫ Postgresql Version8.0.5
Postgresql ≫ Postgresql Version8.0.6
Postgresql ≫ Postgresql Version8.0.7
Postgresql ≫ Postgresql Version8.0.8
Postgresql ≫ Postgresql Version8.0.9
Postgresql ≫ Postgresql Version8.0.10
Postgresql ≫ Postgresql Version8.0.11
Postgresql ≫ Postgresql Version8.0.12
Postgresql ≫ Postgresql Version8.0.13
Postgresql ≫ Postgresql Version8.0.14
Postgresql ≫ Postgresql Version8.1.1
Postgresql ≫ Postgresql Version8.1.2
Postgresql ≫ Postgresql Version8.1.3
Postgresql ≫ Postgresql Version8.1.4
Postgresql ≫ Postgresql Version8.1.5
Postgresql ≫ Postgresql Version8.1.6
Postgresql ≫ Postgresql Version8.1.7
Postgresql ≫ Postgresql Version8.1.8
Postgresql ≫ Postgresql Version8.1.9
Postgresql ≫ Postgresql Version8.1.10
Postgresql ≫ Postgresql Version8.2
Postgresql ≫ Postgresql Version8.2.1
Postgresql ≫ Postgresql Version8.2.2
Postgresql ≫ Postgresql Version8.2.3
Postgresql ≫ Postgresql Version8.2.4
Postgresql ≫ Postgresql Version8.2.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.1% 0.86
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154
http://secunia.com/advisories/28376
Vendor Advisory
http://secunia.com/advisories/28437
Vendor Advisory
http://secunia.com/advisories/28438
Vendor Advisory
http://secunia.com/advisories/28445
Vendor Advisory
http://secunia.com/advisories/28454
Vendor Advisory
http://secunia.com/advisories/28477
Vendor Advisory
http://secunia.com/advisories/28479
Vendor Advisory
http://secunia.com/advisories/28679
Vendor Advisory
http://secunia.com/advisories/29638
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200801-15.xml
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1
http://www.debian.org/security/2008/dsa-1460
http://www.debian.org/security/2008/dsa-1463
http://www.redhat.com/support/errata/RHSA-2008-0038.html
http://www.redhat.com/support/errata/RHSA-2008-0039.html
http://www.redhat.com/support/errata/RHSA-2008-0040.html
http://www.vupen.com/english/advisories/2008/0109
http://www.vupen.com/english/advisories/2008/1071/references
https://usn.ubuntu.com/568-1/
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html
http://secunia.com/advisories/28359
Vendor Advisory
http://secunia.com/advisories/28455
Vendor Advisory
http://secunia.com/advisories/28464
Vendor Advisory
http://secunia.com/advisories/28698
Vendor Advisory
http://securitytracker.com/id?1019157
http://www.mandriva.com/security/advisories?name=MDVSA-2008:004
http://www.postgresql.org/about/news.905
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/485864/100/0/threaded
http://www.securityfocus.com/archive/1/486407/100/0/threaded
http://www.securityfocus.com/bid/27163
Patch
http://www.vupen.com/english/advisories/2008/0061
https://issues.rpath.com/browse/RPL-1768
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/39496
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10493