PT-2006-1617 · Postgresql · Postgresql

Akio Ishida · Publicado 2006-02-14 · Atualizado 2018-10-19 · CVE-2006-0553

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 8.1.0 through 8.1.2

Description The issue allows authenticated database users to gain additional privileges via knowledge of the backend protocol by using a crafted SET ROLE to other database users. This is achieved through a bug in the handling of SET ROLE, which enables escalation of privileges to any other database user, including superuser. A valid login is required to exploit this issue.

Recommendations For PostgreSQL versions 8.1.0 through 8.1.2, consider restricting the use of the SET ROLE command until a patch is available to prevent privilege escalation. As a temporary workaround, limit the privileges of authenticated database users to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2006-0553

Produtos afetados

Postgresql

Referências · 15

• https://postgresql.org/support/security · Nota
• http://secunia.com/advisories/18890 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-0553 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24718 · Nota
• http://vupen.com/english/advisories/2006/0605 · Nota
• http://securityfocus.com/bid/16649 · Nota
• http://kb.cert.org/vuls/id/567452 · Nota
• http://securityfocus.com/archive/1/425037/100/0/threaded · Nota
• http://openpkg.org/security/OpenPKG-SA-2006.004-postgresql.html · Aviso do Fabricante
• http://securitytracker.com/id?1015636 · Nota
• https://postgresql.org/support/security/CVE-2006-0553 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0553 · Nota
• https://postgresql.org · Nota
• http://postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3 · Nota
• http://archives.postgresql.org/pgsql-announce/2006-02/msg00008.php · Nota