PT-2006-1617 · Postgresql · Postgresql

Akio Ishida · Published 2006-02-14 · Updated 2018-10-19 · CVE-2006-0553

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 8.1.0 through 8.1.2

Description The issue allows authenticated database users to gain additional privileges via knowledge of the backend protocol by using a crafted SET ROLE to other database users. This is achieved through a bug in the handling of SET ROLE, which enables escalation of privileges to any other database user, including superuser. A valid login is required to exploit this issue.

Recommendations For PostgreSQL versions 8.1.0 through 8.1.2, consider restricting the use of the SET ROLE command until a patch is available to prevent privilege escalation. As a temporary workaround, limit the privileges of authenticated database users to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2006-0553

Affected Products

Postgresql

References · 15

• http://secunia.com/advisories/18890 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0553 · Security Note
• http://openpkg.org/security/OpenPKG-SA-2006.004-postgresql.html · Vendor Advisory
• https://postgresql.org/support/security · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24718 · Note
• http://vupen.com/english/advisories/2006/0605 · Note
• http://securityfocus.com/bid/16649 · Note
• http://kb.cert.org/vuls/id/567452 · Note
• http://securityfocus.com/archive/1/425037/100/0/threaded · Note
• http://securitytracker.com/id?1015636 · Note
• https://postgresql.org/support/security/CVE-2006-0553 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0553 · Note
• https://postgresql.org · Note
• http://postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3 · Note
• http://archives.postgresql.org/pgsql-announce/2006-02/msg00008.php · Note