CVE-2007-6600 in PostgreSQLinfo

Summary

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

12/31/2007

Disclosure

01/09/2008

CPE

ready

CVSS

6.3

EPSS

0.00809

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!