diff options
| author | simon <simon@FreeBSD.org> | 2006-02-18 22:22:41 +0800 |
|---|---|---|
| committer | simon <simon@FreeBSD.org> | 2006-02-18 22:22:41 +0800 |
| commit | 3b5d442d5e71d8fb125501f9664c312121f0d6bb (patch) | |
| tree | f4a4ff886c45f0502f46e38b62693a08b9b1cee0 /security/vuxml | |
| parent | bf164d823fd23f9ab3546b9becb769ffd134d5e1 (diff) | |
| download | freebsd-ports-graphics-3b5d442d5e71d8fb125501f9664c312121f0d6bb.tar.gz freebsd-ports-graphics-3b5d442d5e71d8fb125501f9664c312121f0d6bb.tar.zst freebsd-ports-graphics-3b5d442d5e71d8fb125501f9664c312121f0d6bb.zip | |
Document postgresql81-server -- SET ROLE privilege escalation.
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 8bd88286cf0..1ce47c4a3c2 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,36 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="0b2b4b4d-a07c-11da-be0a-000c6ec775d9"> + <topic>postgresql81-server -- SET ROLE privilege escalation</topic> + <affects> + <package> + <name>postgresql-server</name> + <range><ge>8.1.0.</ge><lt>8.1.3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The PostgreSQL team reports:</p> + <blockquote cite="http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3"> + <p>Due to inadequate validity checking, a user could exploit + the special case that SET ROLE normally uses to restore + the previous role setting after an error. This allowed + ordinary users to acquire superuser status, for + example.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2006-0553</cvename> + <url>http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3</url> + </references> + <dates> + <discovery>2006-02-14</discovery> + <entry>2006-02-18</entry> + </dates> + </vuln> + <vuln vid="63fe4189-9f97-11da-ac32-0001020eed82"> <topic>gnupg -- false positive signature verification</topic> <affects> |