mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-30 01:15:52 +00:00
Code Issues Releases Activity

Document privilege escalation vulnerability in postgresql.

Browse Source
This commit is contained in:
Simon L. B. Nielsen 2005-02-08 21:33:54 +00:00
parent fc72cc4d24
commit 98933fd487
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=128318
1 changed files with 38 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
security/vuxml/vuln.xml
View File

@ -32,6 +32,44 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="5d425189-7a03-11d9-a9e7-0001020eed82">
<topic>postgresql -- privilege escalation vulnerability</topic>
<affects>
<package>
<name>postgresql</name>
<name>postgresql-server</name>
<name>ja-postgresql</name>
<range><lt>7.3.9</lt></range>
<range><gt>7.4.*</gt><lt>7.4.7</lt></range>
<range><gt>8.*</gt><lt>8.0.1</lt></range>
</package>
<package>
<name>postgresql-devel</name>
<range><le>8.0.1,1</le></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>John Heasman and others disovered that non-privileged users
could use the <q>LOAD</q> extension to load arbitrary
libraries into the postgres server process space. This
could be used by non-privileged local users to execute
arbitrary code with the privileges of the postgresql
server.</p>
</body>
</description>
<references>
<bid>12411</bid>
<cvename>CAN-2005-0227</cvename>
<mlist>http://archives.postgresql.org/pgsql-announce/2005-02/msg00000.php</mlist>
<mlist>http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php</mlist>
</references>
<dates>
<discovery>2005-01-21</discovery>
<entry>2005-02-08</entry>
</dates>
</vuln>
<vuln vid="831a6a66-79fa-11d9-a9e7-0001020eed82">
<topic>ethereal -- multiple protocol dissectors vulnerabilities</topic>
<affects>