The make check command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mac_os_x | Apple | 10.10.4 (including) | 10.10.4 (including) |
Mac_os_x_server | Apple | 5.0.3 (including) | 5.0.3 (including) |