Lucene search
RedHatRHSA-2007:0337HistoryMay 03, 2007 - 12:00 a.m.
(RHSA-2007:0337) Moderate: postgresql security update
2007-05-0300:00:00
access.redhat.com
13
0.004 Low
EPSS
Percentile
73.3%
PostgreSQL is an advanced Object-Relational database management system
(DBMS).
A flaw was found in the way PostgreSQL allows authenticated users to
execute security-definer functions. It was possible for an unprivileged
user to execute arbitrary code with the privileges of the security-definer
function. (CVE-2007-2138)
Users of PostgreSQL should upgrade to these updated packages containing
PostgreSQL version 8.1.9 which corrects this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 4 | i386 | postgresql-libs | < 8.1.9-1.el4s1.1 | postgresql-libs-8.1.9-1.el4s1.1.i386.rpm |
| RedHat | 4 | i386 | postgresql | < 8.1.9-1.el4s1.1 | postgresql-8.1.9-1.el4s1.1.i386.rpm |
| RedHat | 4 | i386 | postgresql-pl | < 8.1.9-1.el4s1.1 | postgresql-pl-8.1.9-1.el4s1.1.i386.rpm |
| RedHat | 4 | x86_64 | postgresql-devel | < 8.1.9-1.el4s1.1 | postgresql-devel-8.1.9-1.el4s1.1.x86_64.rpm |
| RedHat | 4 | i386 | postgresql-test | < 8.1.9-1.el4s1.1 | postgresql-test-8.1.9-1.el4s1.1.i386.rpm |
| RedHat | 4 | x86_64 | postgresql-tcl | < 8.1.9-1.el4s1.1 | postgresql-tcl-8.1.9-1.el4s1.1.x86_64.rpm |
| RedHat | 4 | x86_64 | postgresql | < 8.1.9-1.el4s1.1 | postgresql-8.1.9-1.el4s1.1.x86_64.rpm |
| RedHat | 4 | i386 | postgresql-tcl | < 8.1.9-1.el4s1.1 | postgresql-tcl-8.1.9-1.el4s1.1.i386.rpm |
| RedHat | 4 | x86_64 | postgresql-pl | < 8.1.9-1.el4s1.1 | postgresql-pl-8.1.9-1.el4s1.1.x86_64.rpm |
| RedHat | 4 | i386 | postgresql-devel | < 8.1.9-1.el4s1.1 | postgresql-devel-8.1.9-1.el4s1.1.i386.rpm |
Related
nessus
nessus
Fedora Core 6 : postgresql-8.1.9-1.fc6 (2007-565)
2007-06-07 00:00:00
RHEL 3 / 4 / 5 : postgresql (RHSA-2007:0336)
2007-05-10 00:00:00
GLSA-200705-12 : PostgreSQL: Privilege escalation
2007-05-11 00:00:00
gentoo
gentoo
PostgreSQL: Privilege escalation
2007-05-10 00:00:00
centos
centos
postgresql, rh security update
2007-05-08 16:27:32
postgresql
postgresql
Vulnerability in core server (CVE-2007-2138)
2007-04-24 20:19:00
openvas
openvas
Mandriva Update for postgresql MDKSA-2007:094 (postgresql)
2009-04-09 00:00:00
Ubuntu Update for postgresql-8.1, postgresql-8.2 vulnerability USN-454-1
2009-03-23 00:00:00
debian
debian
[SECURITY] [DSA 1309-1] New PostgreSQL 8.1 packages fix privilege escalation
2007-06-16 21:34:45
[SECURITY] [DSA 1311-1] New PostgreSQL 7.4 packages fix privilege escalation
2007-06-17 23:23:17
[SECURITY] [DLA-1874-1] postgresql-9.4 security update
2019-08-09 08:33:57
securityvulns
securityvulns
PostgreSQL privilege escalation
2007-04-24 00:00:00
rPSA-2007-0081-1 postgresql postgresql-server
2007-04-24 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: postgresql-8.2.4-1.fc7
2007-06-06 03:02:26
[SECURITY] Fedora Core 6 Update: postgresql-8.1.9-1.fc6
2007-06-06 17:22:21
[SECURITY] Fedora Core 5 Update: postgresql-8.1.9-1.fc5
2007-06-06 17:24:23
cve
cve
CVE-2007-2138
2007-04-24 20:19:00
redhat
redhat
(RHSA-2007:0336) Moderate: postgresql security update
2007-05-08 00:00:00
prion
prion
Design/Logic Flaw
2007-04-24 20:19:00
ubuntu
ubuntu
PostgreSQL vulnerability
2007-04-27 00:00:00
nvd
nvd
CVE-2007-2138
2007-04-24 20:19:00
ubuntucve
ubuntucve
CVE-2007-2138
2007-04-24 00:00:00
veracode
veracode
Untrusted Search Path
2020-04-10 00:13:56
cvelist
cvelist
CVE-2007-2138
2007-04-24 20:00:00
freebsd
freebsd
archlinux
archlinux
[ASA-201908-8] postgresql: multiple issues
2019-08-10 00:00:00
[ASA-201908-7] postgresql-libs: multiple issues
2019-08-10 00:00:00
oraclelinux
oraclelinux
Moderate: postgresql security update
2007-05-08 00:00:00