New Search

Vulnerability in PostgreSQL 7.4.x before 7.4.27 8.0.x before 8.0.23 8.1.x before 8.1.19 8.2.x before 8.2.15 8.3.x before 8.3.9 and 8.4.x before 8.4.2 (CVE-2009-4136)

oval:org.cisecurity:def:8184

PostgreSQL 7.4.x before 7.4.27 8.0.x before 8.0.23 8.1.x before 8.1.19 8.2.x before 8.2.15 8.3.x before 8.3.9 and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser which allows remote authenticated users to gain privileges via a table with crafted index functions as demonstrated by functions that modify (1) search_path or (2) a prepared statement a related issue to CVE-2007-6600 and CVE-2009-3230.

Family:
windows
Status:
ACCEPTED
Platform(s):
  • Microsoft Windows Server 2003
  • Microsoft Windows Server 2008 R2
  • Microsoft Windows 8
  • Microsoft Windows 10
  • Microsoft Windows Vista
  • Microsoft Windows 7
  • Microsoft Windows Server 2008
  • Microsoft Windows Server 2016
  • Microsoft Windows 8.1
  • Microsoft Windows Server 2012 R2
  • Microsoft Windows XP
  • Microsoft Windows Server 2012
Class:
vulnerability
Reference(s):
  • CVE-2009-4136
Product(s):
  • PostgreSQL