CVE-2014-0061 in PostgreSQL
Zusammenfassung (Englisch)
The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to gain privileges via a function that is (1) defined in another language or (2) not allowed to be directly called by the user due to permissions.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservieren
03.12.2013
Veröffentlichung
31.03.2014
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 12398 | PostgreSQL PL Validator erweiterte Rechte | 264 | Unbewiesen | Offizieller Fix | CVE-2014-0061 |