CVE-2014-0061 in PostgreSQL
Summary
The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to gain privileges via a function that is (1) defined in another language or (2) not allowed to be directly called by the user due to permissions.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
12/03/2013
Disclosure
03/31/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 12398 | PostgreSQL PL Validator access control | 264 | Unproven | Official fix | CVE-2014-0061 |