CVEvulnerability
CVE-2014-0061
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to gain privileges via a function that is (1) defined in another language or (2) not allowed to be directly called by the user due to permissions.
Affected configurations
• postgresql postgresql (<= 8.4.19)
• postgresql postgresql 8.4.1
• postgresql postgresql 8.4.2
• postgresql postgresql 8.4.3
• postgresql postgresql 8.4.4
• postgresql postgresql 8.4.5
• postgresql postgresql 8.4.6
• postgresql postgresql 8.4.7
• postgresql postgresql 8.4.8
• postgresql postgresql 8.4.9
• postgresql postgresql 8.4.10
• postgresql postgresql 8.4.11
• postgresql postgresql 8.4.12
• postgresql postgresql 8.4.13
• postgresql postgresql 8.4.14
• postgresql postgresql 8.4.15
• postgresql postgresql 8.4.16
• postgresql postgresql 8.4.17
• postgresql postgresql 8.4.18
• postgresql postgresql 9.0
• postgresql postgresql 9.0.1
• postgresql postgresql 9.0.2
• postgresql postgresql 9.0.3
• postgresql postgresql 9.0.4
• postgresql postgresql 9.0.5
• postgresql postgresql 9.0.6
• postgresql postgresql 9.0.7
• postgresql postgresql 9.0.8
• postgresql postgresql 9.0.9
• postgresql postgresql 9.0.10
• postgresql postgresql 9.0.11
• postgresql postgresql 9.0.12
• postgresql postgresql 9.0.13
• postgresql postgresql 9.0.14
• postgresql postgresql 9.0.15
• postgresql postgresql 9.1
• postgresql postgresql 9.1.1
• postgresql postgresql 9.1.2
• postgresql postgresql 9.1.3
• postgresql postgresql 9.1.4
• postgresql postgresql 9.1.5
• postgresql postgresql 9.1.6
• postgresql postgresql 9.1.7
• postgresql postgresql 9.1.8
• postgresql postgresql 9.1.9
• postgresql postgresql 9.1.10
• postgresql postgresql 9.1.11
• postgresql postgresql 9.2
• postgresql postgresql 9.2.1
• postgresql postgresql 9.2.2
• postgresql postgresql 9.2.3
• postgresql postgresql 9.2.4
• postgresql postgresql 9.2.5
• postgresql postgresql 9.2.6
• postgresql postgresql 9.3
• postgresql postgresql 9.3.1
• postgresql postgresql 9.3.2
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html archives.neohapsis.com
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 kb.juniper.net
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2014-0211.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0221.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0249.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0469.html rhn.redhat.com
- http://secunia.com/advisories/61307 secunia.com
- http://support.apple.com/kb/HT6448 support.apple.com
- http://wiki.postgresql.org/wiki/20140220securityrelease Vendor Advisory
- http://www.debian.org/security/2014/dsa-2864 www.debian.org
- http://www.debian.org/security/2014/dsa-2865 www.debian.org
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html www.oracle.com
- http://www.postgresql.org/about/news/1506/ Vendor Advisory
- http://www.ubuntu.com/usn/USN-2120-1 www.ubuntu.com
- https://support.apple.com/kb/HT6536 support.apple.com
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html archives.neohapsis.com
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 kb.juniper.net
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2014-0211.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0221.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0249.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0469.html rhn.redhat.com
- http://secunia.com/advisories/61307 secunia.com
- http://support.apple.com/kb/HT6448 support.apple.com
- http://wiki.postgresql.org/wiki/20140220securityrelease Vendor Advisory
- http://www.debian.org/security/2014/dsa-2864 www.debian.org
- http://www.debian.org/security/2014/dsa-2865 www.debian.org
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html www.oracle.com
- http://www.postgresql.org/about/news/1506/ Vendor Advisory
- http://www.ubuntu.com/usn/USN-2120-1 www.ubuntu.com
- https://support.apple.com/kb/HT6536 support.apple.com