Red Hat Security AdvisoryRHSA-2008:0039
postgresql security update
Released 2008-01-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 rh-postgresql-7.3.21-1, rh-postgresql-7.3.21-1.i386, rh-postgresql-contrib-7.3.21-1 +19
- Red Hat Enterprise Linux AS version 3 rh-postgresql-7.3.21-1, rh-postgresql-7.3.21-1.i386, rh-postgresql-7.3.21-1.ia64 +41
- Red Hat Enterprise Linux ES version 3 rh-postgresql-7.3.21-1, rh-postgresql-7.3.21-1.i386, rh-postgresql-7.3.21-1.ia64 +30
- Red Hat Enterprise Linux WS version 3 rh-postgresql-7.3.21-1, rh-postgresql-7.3.21-1.i386, rh-postgresql-7.3.21-1.ia64 +30
Fixes 3 records
Priority LOW 35
The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileg…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01573 · Published 2008-01-09 · Fixed CWE-287
Priority LOW 34
PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within ind…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.03124 · Published 2008-01-09 · Fixed CWE-264
Priority LOW 33
PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL q…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.01257 · Published 2007-06-19 · Fixed CWE-264
THREATIST.IORead the docs