CVE-2009-4136
PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which…
Does this matter?
Lower severity and a low EPSS score (3.64%). Track it; it rarely justifies an emergency change on its own.
Description
PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 3.64% probability · 89th percentile
- CISA KEV
- Not listed
- Affected
- postgresql/postgresql
- Source
- secalert@redhat.com
References
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html
- http://marc.info/?l=bugtraq&m=134124585221119&w=2
- http://osvdb.org/61039
- http://secunia.com/advisories/37663
- http://secunia.com/advisories/39820
- http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:333
- http://www.postgresql.org/docs/current/static/release-7-4-27.htmlPatch, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-8-0-23.htmlPatch, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-8-1-19.htmlPatch, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-8-2-15.htmlPatch, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-8-3-9.htmlPatch, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-8-4-2.htmlPatch, Vendor Advisory
- http://www.postgresql.org/support/security.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0427.html
- http://www.redhat.com/support/errata/RHSA-2010-0428.html
- http://www.redhat.com/support/errata/RHSA-2010-0429.html
- http://www.securityfocus.com/archive/1/509917/100/0/threaded
- http://www.securityfocus.com/bid/37333
- http://www.securitytracker.com/id?1023326
- http://www.vupen.com/english/advisories/2009/3519
- http://www.vupen.com/english/advisories/2010/1197
- https://bugzilla.redhat.com/show_bug.cgi?id=546321Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9358
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01035.html
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01056.html
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html
- http://marc.info/?l=bugtraq&m=134124585221119&w=2
- http://osvdb.org/61039
- http://secunia.com/advisories/37663
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.