CVE

Id
44559  
CVE No.
CVE-2010-1975  
Status
Candidate  
Description
PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement.  
Phase
Assigned (20100519)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
485902 44559 CVE-2010-1975 CONFIRM:http://www.postgresql.org/docs/current/static/release-7-4-29.html  View
485903 44559 CVE-2010-1975 CONFIRM:http://www.postgresql.org/docs/current/static/release-8-0-25.html  View
485904 44559 CVE-2010-1975 CONFIRM:http://www.postgresql.org/docs/current/static/release-8-1-21.html  View
485905 44559 CVE-2010-1975 CONFIRM:http://www.postgresql.org/docs/current/static/release-8-2-17.html  View
485906 44559 CVE-2010-1975 CONFIRM:http://www.postgresql.org/docs/current/static/release-8-3-11.html  View
485907 44559 CVE-2010-1975 CONFIRM:http://www.postgresql.org/docs/current/static/release-8-4-4.html  View
485908 44559 CVE-2010-1975 DEBIAN:DSA-2051  View
485909 44559 CVE-2010-1975 URL:http://www.debian.org/security/2010/dsa-2051  View
485910 44559 CVE-2010-1975 HP:HPSBMU02781  View
485911 44559 CVE-2010-1975 URL:http://marc.info/?l=bugtraq&m=134124585221119&w=2  View
485912 44559 CVE-2010-1975 HP:SSRT100617  View
485913 44559 CVE-2010-1975 URL:http://marc.info/?l=bugtraq&m=134124585221119&w=2  View
485914 44559 CVE-2010-1975 MANDRIVA:MDVSA-2010:103  View
485915 44559 CVE-2010-1975 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:103  View
485916 44559 CVE-2010-1975 SUSE:SUSE-SR:2010:014  View
485917 44559 CVE-2010-1975 URL:http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html  View
485918 44559 CVE-2010-1975 BID:40304  View
485919 44559 CVE-2010-1975 URL:http://www.securityfocus.com/bid/40304  View
485920 44559 CVE-2010-1975 OVAL:oval:org.mitre.oval:def:11004  View
485921 44559 CVE-2010-1975 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11004  View
485922 44559 CVE-2010-1975 SECUNIA:39939  View
485923 44559 CVE-2010-1975 URL:http://secunia.com/advisories/39939  View
485924 44559 CVE-2010-1975 VUPEN:ADV-2010-1207  View
485925 44559 CVE-2010-1975 URL:http://www.vupen.com/english/advisories/2010/1207  View
485926 44559 CVE-2010-1975 VUPEN:ADV-2010-1221  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38297 JVNDB-2010-004082 Joomla! 用の Affiliate Datafeeds コンポーネントにおけるディレクトリトラバーサルの脆弱性 Joomla! 用の Affiliate Datafeeds (com_datafeeds) コンポーネントには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-1979 44559 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004082.html  View