NVD

Id
29010  
Name
CVE-2014-0067  
Description
The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-31  
Modified Date
2016-11-28  
Seq
2014-0067  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153032 29010 CVE-2014-0067 APPLE-SA-2015-08-13-2  View
153033 29010 CVE-2014-0067 APPLE-SA-2015-09-16-4  View
153034 29010 CVE-2014-0067 http://wiki.postgresql.org/wiki/20140220securityrelease  View
153035 29010 CVE-2014-0067 DSA-2864  View
153036 29010 CVE-2014-0067 DSA-2865  View
153037 29010 CVE-2014-0067 http://www.postgresql.org/about/news/1506/  View
153038 29010 CVE-2014-0067 65721  View
153039 29010 CVE-2014-0067 https://support.apple.com/HT205219  View
153040 29010 CVE-2014-0067 https://support.apple.com/kb/HT205031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12975 JVNDB-2014-001850 PostgreSQL のテストスイート用の "make check" コマンドにおける権限を取得される脆弱性 PostgreSQL のテストスイート用の "make check" コマンドは、テストに使用されるデータベースクラスタの認証要件を指定するのに initdb を適切に呼び出さないため、権限を取得される脆弱性が存在します。 CVE-2014-0067 67468 CVE-2014-0067 29010 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001850.html 2014-02-20 2015-10-05 View