CVE Vulnerabilities

CVE-2006-0553

Published: Feb 14, 2006 | Modified: Oct 19, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via knowledge of the backend protocol using a crafted SET ROLE to other database users, a different vulnerability than CVE-2006-0678.

Affected Software

Name Vendor Start Version End Version
Postgresql Postgresql 8.1.0 (including) 8.1.0 (including)
Postgresql Postgresql 8.1.1 (including) 8.1.1 (including)
Postgresql Postgresql 8.1.2 (including) 8.1.2 (including)
Postgresql-8.1 Ubuntu dapper *
Postgresql-8.1 Ubuntu devel *
Postgresql-8.1 Ubuntu edgy *
Postgresql-8.1 Ubuntu feisty *
Postgresql-8.2 Ubuntu devel *
Postgresql-8.2 Ubuntu feisty *

References