Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6
CVSSv2

CVE-2007-2138

Published: 24/04/2007 Updated: 19/10/2018
CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8
VMScore: 534
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Subscribe to Postgresql

Vulnerability Summary

Untrusted search path vulnerability in PostgreSQL prior to 7.3.19, 7.4.x prior to 7.4.17, 8.0.x prior to 8.0.13, 8.1.x prior to 8.1.9, and 8.2.x prior to 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

postgresql postgresql

debian debian linux 3.1

debian debian linux 4.0

canonical ubuntu linux 6.06

canonical ubuntu linux 7.04

canonical ubuntu linux 6.10

Vendor Advisories

Ubuntu Security Notice: postgresql-8.1, postgresql-8.2 vulnerability
PostgreSQL did not handle the “search_path” configuration option in a secure way for functions declared as “SECURITY DEFINER” ...
Debian Security Advisories: DSA-1309-1 postgresql-8.1 -- programming error
It was discovered that the PostgreSQL database performs insufficient validation of variables passed to privileged SQL statements, so called security definers, which could lead to SQL privilege escalation The oldstable distribution (sarge) doesn't contain PostgreSQL 81 For the stable distribution (etch) this problem has been fixed in version 81 ...
PostgreSQL CVE: CVE-2019-10208
Given a suitable SECURITY DEFINER function, an attacker can execute arbitrary SQL under the identity of the function owner An attack requires EXECUTE permission on the function, which must itself contain a function call having inexact argument type match For example, length('foo'::varchar) and length('foo') are inexact, while length('foo'::text ...

References

CWE-264http://www.postgresql.org/about/news.791http://www.postgresql.org/support/security.htmlhttp://secunia.com/advisories/25019https://issues.rpath.com/browse/RPL-1292http://www.securityfocus.com/bid/23618http://secunia.com/advisories/25005http://secunia.com/advisories/24989http://sunsolve.sun.com/search/document.do?assetkey=1-26-102894-1http://www.trustix.org/errata/2007/0015/http://www.ubuntu.com/usn/usn-454-1http://www.securitytracker.com/id?1017974http://secunia.com/advisories/25037http://secunia.com/advisories/24999http://secunia.com/advisories/25058http://www.redhat.com/support/errata/RHSA-2007-0337.htmlhttp://security.gentoo.org/glsa/glsa-200705-12.xmlhttp://rhn.redhat.com/errata/RHSA-2007-0336.htmlhttp://secunia.com/advisories/25184http://secunia.com/advisories/25238http://support.avaya.com/elmodocs2/security/ASA-2007-190.htmhttp://www.debian.org/security/2007/dsa-1309http://www.debian.org/security/2007/dsa-1311http://www.mandriva.com/security/advisories?name=MDKSA-2007:094http://secunia.com/advisories/25334http://secunia.com/advisories/25717http://secunia.com/advisories/25725http://secunia.com/advisories/25720http://www.vupen.com/english/advisories/2007/1497http://www.vupen.com/english/advisories/2007/1549https://exchange.xforce.ibmcloud.com/vulnerabilities/33842https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10090https://usn.ubuntu.com/454-1/https://nvd.nist.govhttps://www.postgresql.org/support/security/CVE-2019-10208/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook