CVEvulnerability

CVE-2014-0067

4.6 MEDIUM Published 2014-03-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-03-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.

Affected configurations

• apple mac os x 10.10.4 • apple mac os x server 5.0.3 • postgresql postgresql (<= 8.4.19) • postgresql postgresql 8.4.1 • postgresql postgresql 8.4.2 • postgresql postgresql 8.4.3 • postgresql postgresql 8.4.4 • postgresql postgresql 8.4.5 • postgresql postgresql 8.4.6 • postgresql postgresql 8.4.7 • postgresql postgresql 8.4.8 • postgresql postgresql 8.4.9 • postgresql postgresql 8.4.10 • postgresql postgresql 8.4.11 • postgresql postgresql 8.4.12 • postgresql postgresql 8.4.13 • postgresql postgresql 8.4.14 • postgresql postgresql 8.4.15 • postgresql postgresql 8.4.16 • postgresql postgresql 8.4.17 • postgresql postgresql 8.4.18 • postgresql postgresql 9.0 • postgresql postgresql 9.0.1 • postgresql postgresql 9.0.2 • postgresql postgresql 9.0.3 • postgresql postgresql 9.0.4 • postgresql postgresql 9.0.5 • postgresql postgresql 9.0.6 • postgresql postgresql 9.0.7 • postgresql postgresql 9.0.8 • postgresql postgresql 9.0.9 • postgresql postgresql 9.0.10 • postgresql postgresql 9.0.11 • postgresql postgresql 9.0.12 • postgresql postgresql 9.0.13 • postgresql postgresql 9.0.14 • postgresql postgresql 9.0.15 • postgresql postgresql 9.1 • postgresql postgresql 9.1.1 • postgresql postgresql 9.1.2 • postgresql postgresql 9.1.3 • postgresql postgresql 9.1.4 • postgresql postgresql 9.1.5 • postgresql postgresql 9.1.6 • postgresql postgresql 9.1.7 • postgresql postgresql 9.1.8 • postgresql postgresql 9.1.9 • postgresql postgresql 9.1.10 • postgresql postgresql 9.1.11 • postgresql postgresql 9.2 • postgresql postgresql 9.2.1 • postgresql postgresql 9.2.2 • postgresql postgresql 9.2.3 • postgresql postgresql 9.2.4 • postgresql postgresql 9.2.5 • postgresql postgresql 9.2.6 • postgresql postgresql 9.3 • postgresql postgresql 9.3.1 • postgresql postgresql 9.3.2

Related

Weakness · not in database (1)

References