NVD

Id
51282  
Name
CVE-2009-4136  
Description
PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-12-15  
Modified Date
2016-08-22  
Seq
2009-4136  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260088 51282 CVE-2009-4136 SUSE-SR:2010:001  View
260089 51282 CVE-2009-4136 SSRT100617  View
260090 51282 CVE-2009-4136 oval:org.mitre.oval:def:9358  View
260091 51282 CVE-2009-4136 http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012  View
260092 51282 CVE-2009-4136 MDVSA-2009:333  View
260093 51282 CVE-2009-4136 http://www.postgresql.org/docs/current/static/release-7-4-27.html  View
260094 51282 CVE-2009-4136 http://www.postgresql.org/docs/current/static/release-8-0-23.html  View
260095 51282 CVE-2009-4136 http://www.postgresql.org/docs/current/static/release-8-1-19.html  View
260096 51282 CVE-2009-4136 http://www.postgresql.org/docs/current/static/release-8-2-15.html  View
260097 51282 CVE-2009-4136 http://www.postgresql.org/docs/current/static/release-8-3-9.html  View
260098 51282 CVE-2009-4136 http://www.postgresql.org/docs/current/static/release-8-4-2.html  View
260099 51282 CVE-2009-4136 http://www.postgresql.org/support/security.html  View
260100 51282 CVE-2009-4136 RHSA-2010:0427  View
260101 51282 CVE-2009-4136 RHSA-2010:0428  View
260102 51282 CVE-2009-4136 RHSA-2010:0429  View
260103 51282 CVE-2009-4136 20100307 rPSA-2010-0012-1 postgresql postgresql-contrib postgresql-server  View
260104 51282 CVE-2009-4136 37333  View
260105 51282 CVE-2009-4136 1023326  View
260106 51282 CVE-2009-4136 ADV-2009-3519  View
260107 51282 CVE-2009-4136 ADV-2010-1197  View
260108 51282 CVE-2009-4136 https://bugzilla.redhat.com/show_bug.cgi?id=546321  View
260109 51282 CVE-2009-4136 FEDORA-2009-13363  View
260110 51282 CVE-2009-4136 FEDORA-2009-13381  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41443 JVNDB-2009-002450 PostgreSQL におけるインデックスの処理に関する権限を取得される脆弱性 PostgreSQL には、スーパーユーザ権限によるインデックスの処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2009-4136 41567 CVE-2009-4136 51282 6.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002450.html 2009-12-15 2010-06-07 View