CVE

Id
16657  
CVE No.
CVE-2006-0553  
Status
Candidate  
Description
PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" using a crafted SET ROLE to other database users, a different vulnerability than CVE-2006-0678.  
Phase
Assigned (20060205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
134533 16657 CVE-2006-0553 BUGTRAQ:20060215 PostgreSQL security releases 8.1.3, 8.0.7, 7.4.12, 7.3.14  View
134534 16657 CVE-2006-0553 URL:http://www.securityfocus.com/archive/1/archive/1/425037/100/0/threaded  View
134535 16657 CVE-2006-0553 MLIST:[pgsql-announce] 20060214 Minor Releases 7.3 thru 8.1 Available to Fix Security Issue  View
134536 16657 CVE-2006-0553 URL:http://archives.postgresql.org/pgsql-announce/2006-02/msg00008.php  View
134537 16657 CVE-2006-0553 CONFIRM:http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3  View
134538 16657 CVE-2006-0553 OPENPKG:OpenPKG-SA-2006.004  View
134539 16657 CVE-2006-0553 URL:http://www.openpkg.org/security/OpenPKG-SA-2006.004-postgresql.html  View
134540 16657 CVE-2006-0553 CERT-VN:VU#567452  View
134541 16657 CVE-2006-0553 URL:http://www.kb.cert.org/vuls/id/567452  View
134542 16657 CVE-2006-0553 BID:16649  View
134543 16657 CVE-2006-0553 URL:http://www.securityfocus.com/bid/16649  View
134544 16657 CVE-2006-0553 VUPEN:ADV-2006-0605  View
134545 16657 CVE-2006-0553 URL:http://www.vupen.com/english/advisories/2006/0605  View
134546 16657 CVE-2006-0553 SECTRACK:1015636  View
134547 16657 CVE-2006-0553 URL:http://securitytracker.com/id?1015636  View
134548 16657 CVE-2006-0553 SECUNIA:18890  View
134549 16657 CVE-2006-0553 URL:http://secunia.com/advisories/18890  View
134550 16657 CVE-2006-0553 XF:postgresql-setrole-privilege-elevation(24718)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57924 JVNDB-2006-000120 Linux Kernel の binfmt_elf.c におけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2006-0555 16657 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000120.html  View