NVD

Id
50435  
Name
CVE-2009-3230  
Description
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-09-17  
Modified Date
2016-08-22  
Seq
2009-3230  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
255103 50435 CVE-2009-3230 [pgsql-www] 20090909 Re: Incorrect CVE reference on security page  View
255104 50435 CVE-2009-3230 SUSE-SR:2009:016  View
255105 50435 CVE-2009-3230 SUSE-SR:2009:017  View
255106 50435 CVE-2009-3230 SSRT100617  View
255107 50435 CVE-2009-3230 oval:org.mitre.oval:def:10166  View
255108 50435 CVE-2009-3230 270408  View
255109 50435 CVE-2009-3230 http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012  View
255110 50435 CVE-2009-3230 http://www.postgresql.org/docs/8.3/static/release-8-3-8.html  View
255111 50435 CVE-2009-3230 http://www.postgresql.org/support/security.html  View
255112 50435 CVE-2009-3230 20100307 rPSA-2010-0012-1 postgresql postgresql-contrib postgresql-server  View
255113 50435 CVE-2009-3230 36314  View
255114 50435 CVE-2009-3230 USN-834-1  View
255115 50435 CVE-2009-3230 DSA-1900  View
255116 50435 CVE-2009-3230 ADV-2009-2602  View
255117 50435 CVE-2009-3230 https://bugzilla.redhat.com/show_bug.cgi?id=522085  View
255118 50435 CVE-2009-3230 FEDORA-2009-9473  View
255119 50435 CVE-2009-3230 FEDORA-2009-9474  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41147 JVNDB-2009-002154 PostgreSQL の core server コンポーネントにおける権限昇格の脆弱性 PostgreSQL の core server コンポーネントには、SET ROLE および SET SESSION AUTHORIZATION の操作に対して適切な権限を付与しないため、権限を取得される脆弱性が存在します。 CVE-2009-3230 40661 CVE-2009-3230 50435 6.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002154.html 2009-09-17 2010-01-19 View