Lucene search
PostgreSQL Global Development GroupPOSTGRESQL:CVE-2007-2138HistoryApr 24, 2007 - 8:19 p.m.
Vulnerability in core server (CVE-2007-2138)
2007-04-2420:19:00
PostgreSQL Global Development Group
www.postgresql.org
48
0.004 Low
EPSS
Percentile
73.3%
A vulnerability involving insecure search_path settings allows unprivileged users to gain the SQL privileges of the owner of any SECURITY DEFINER function they are allowed to call. Securing such a function requires both a software update and changes to the function definition.
| CPE | Name | Operator | Version |
|---|---|---|---|
| postgresql | lt | 7.3.19 | |
| postgresql | lt | 8.1.9 | |
| postgresql | lt | 8.0.13 | |
| postgresql | lt | 8.2.4 | |
| postgresql | lt | 7.4.17 |
References
Related
fedora
fedora
[SECURITY] Fedora 7 Update: postgresql-8.2.4-1.fc7
2007-06-06 03:02:26
[SECURITY] Fedora Core 6 Update: postgresql-8.1.9-1.fc6
2007-06-06 17:22:21
[SECURITY] Fedora Core 5 Update: postgresql-8.1.9-1.fc5
2007-06-06 17:24:23
securityvulns
securityvulns
PostgreSQL privilege escalation
2007-04-24 00:00:00
rPSA-2007-0081-1 postgresql postgresql-server
2007-04-24 00:00:00
nessus
nessus
Fedora Core 6 : postgresql-8.1.9-1.fc6 (2007-565)
2007-06-07 00:00:00
RHEL 3 / 4 / 5 : postgresql (RHSA-2007:0336)
2007-05-10 00:00:00
GLSA-200705-12 : PostgreSQL: Privilege escalation
2007-05-11 00:00:00
gentoo
gentoo
PostgreSQL: Privilege escalation
2007-05-10 00:00:00
centos
centos
postgresql, rh security update
2007-05-08 16:27:32
openvas
openvas
Mandriva Update for postgresql MDKSA-2007:094 (postgresql)
2009-04-09 00:00:00
Ubuntu Update for postgresql-8.1, postgresql-8.2 vulnerability USN-454-1
2009-03-23 00:00:00
debian
debian
[SECURITY] [DSA 1309-1] New PostgreSQL 8.1 packages fix privilege escalation
2007-06-16 21:34:45
[SECURITY] [DSA 1311-1] New PostgreSQL 7.4 packages fix privilege escalation
2007-06-17 23:23:17
[SECURITY] [DLA-1874-1] postgresql-9.4 security update
2019-08-09 08:33:57
cve
cve
CVE-2007-2138
2007-04-24 20:19:00
redhat
redhat
(RHSA-2007:0336) Moderate: postgresql security update
2007-05-08 00:00:00
(RHSA-2007:0337) Moderate: postgresql security update
2007-05-03 00:00:00
prion
prion
Design/Logic Flaw
2007-04-24 20:19:00
ubuntu
ubuntu
PostgreSQL vulnerability
2007-04-27 00:00:00
nvd
nvd
CVE-2007-2138
2007-04-24 20:19:00
ubuntucve
ubuntucve
CVE-2007-2138
2007-04-24 00:00:00
veracode
veracode
Untrusted Search Path
2020-04-10 00:13:56
cvelist
cvelist
CVE-2007-2138
2007-04-24 20:00:00
archlinux
archlinux
[ASA-201908-8] postgresql: multiple issues
2019-08-10 00:00:00
[ASA-201908-7] postgresql-libs: multiple issues
2019-08-10 00:00:00
freebsd
freebsd
oraclelinux
oraclelinux
Moderate: postgresql security update
2007-05-08 00:00:00