Oval Definition:	oval:org.mitre.oval:def:21808
Revision Date: 2014-05-26 Version: 13 Title: ELSA-2007:0336: postgresql security update (Moderate) Description: Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings." Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2007-2138 ELSA-2007:0336-02 Platform(s): Oracle Linux 5 Product(s): postgresql rh-postgresql Definition Synopsis Oracle Linux 5.x AND rpm test postgresql-docs is earlier than 0:8.1.9-1.el5 OR postgresql-devel is earlier than 0:8.1.9-1.el5 OR postgresql-test is earlier than 0:8.1.9-1.el5 OR postgresql-contrib is earlier than 0:8.1.9-1.el5 OR postgresql-libs is earlier than 0:8.1.9-1.el5 OR postgresql-tcl is earlier than 0:8.1.9-1.el5 OR postgresql is earlier than 0:8.1.9-1.el5 OR postgresql-server is earlier than 0:8.1.9-1.el5 OR postgresql-pl is earlier than 0:8.1.9-1.el5 OR postgresql-python is earlier than 0:8.1.9-1.el5
BACK