Beveiligingsadvies

CVE-2009-4136

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2009-12-15 18:00:00

Laatst bijgewerkt 2024-08-07 06:54:09

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.

← Alle CVE's bekijken Bekijk op cve.org ↗