Oval Definition:oval:org.mitre.oval:def:10090
Revision Date:2013-04-29Version:12
Title:Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."
Description:Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2007-2138
Platform(s):CentOS Linux 3
CentOS Linux 4
CentOS Linux 5
Oracle Linux 4
Oracle Linux 5
Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
Red Hat Enterprise Linux 5
Product(s):
Definition Synopsis
  • OS Section: RHEL3, CentOS3
  • RHEL3 or CentOS3
  • The operating system installed on the system is Red Hat Enterprise Linux 3
  • OR CentOS Linux 3.x
  • AND Configuration section
  • rh-postgresql-devel is earlier than 0:7.3.19-1
  • OR rh-postgresql-server is earlier than 0:7.3.19-1
  • OR rh-postgresql-python is earlier than 0:7.3.19-1
  • OR rh-postgresql-libs is earlier than 0:7.3.19-1
  • OR rh-postgresql-docs is earlier than 0:7.3.19-1
  • OR rh-postgresql-test is earlier than 0:7.3.19-1
  • OR rh-postgresql-pl is earlier than 0:7.3.19-1
  • OR rh-postgresql-tcl is earlier than 0:7.3.19-1
  • OR rh-postgresql is earlier than 0:7.3.19-1
  • OR rh-postgresql-contrib is earlier than 0:7.3.19-1
  • OR rh-postgresql-jdbc is earlier than 0:7.3.19-1
  • OR OS Section: RHEL4, CentOS4, Oracle Linux 4
  • RHEL4, CentOS4 or Oracle Linux 4
  • The operating system installed on the system is Red Hat Enterprise Linux 4
  • OR CentOS Linux 4.x
  • OR Oracle Linux 4.x
  • AND Configuration section
  • postgresql is earlier than 0:7.4.17-1.RHEL4.1
  • OR postgresql-docs is earlier than 0:7.4.17-1.RHEL4.1
  • OR postgresql-pl is earlier than 0:7.4.17-1.RHEL4.1
  • OR postgresql-tcl is earlier than 0:7.4.17-1.RHEL4.1
  • OR postgresql-libs is earlier than 0:7.4.17-1.RHEL4.1
  • OR postgresql-contrib is earlier than 0:7.4.17-1.RHEL4.1
  • OR postgresql-python is earlier than 0:7.4.17-1.RHEL4.1
  • OR postgresql-test is earlier than 0:7.4.17-1.RHEL4.1
  • OR postgresql-jdbc is earlier than 0:7.4.17-1.RHEL4.1
  • OR postgresql-server is earlier than 0:7.4.17-1.RHEL4.1
  • OR postgresql-devel is earlier than 0:7.4.17-1.RHEL4.1
  • OR OS Section: RHEL5, CentOS5, Oracle Linux 5
  • RHEL5, CentOS5 or Oracle Linux 5
  • The operating system installed on the system is Red Hat Enterprise Linux 5
  • OR The operating system installed on the system is CentOS Linux 5.x
  • OR Oracle Linux 5.x
  • AND Configuration section
  • postgresql is earlier than 0:8.1.9-1.el5
  • OR postgresql-docs is earlier than 0:8.1.9-1.el5
  • OR postgresql-pl is earlier than 0:8.1.9-1.el5
  • OR postgresql-tcl is earlier than 0:8.1.9-1.el5
  • OR postgresql-libs is earlier than 0:8.1.9-1.el5
  • OR postgresql-contrib is earlier than 0:8.1.9-1.el5
  • OR postgresql-python is earlier than 0:8.1.9-1.el5
  • OR postgresql-test is earlier than 0:8.1.9-1.el5
  • OR postgresql-server is earlier than 0:8.1.9-1.el5
  • OR postgresql-devel is earlier than 0:8.1.9-1.el5
    • BACK