CVE-2010-1975

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement.
References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
http://marc.info/?l=bugtraq&m=134124585221119&w=2
http://marc.info/?l=bugtraq&m=134124585221119&w=2
http://secunia.com/advisories/39939
http://www.debian.org/security/2010/dsa-2051
http://www.mandriva.com/security/advisories?name=MDVSA-2010:103
http://www.postgresql.org/docs/current/static/release-7-4-29.html
http://www.postgresql.org/docs/current/static/release-8-0-25.html
http://www.postgresql.org/docs/current/static/release-8-1-21.html
http://www.postgresql.org/docs/current/static/release-8-2-17.html
http://www.postgresql.org/docs/current/static/release-8-3-11.html
http://www.postgresql.org/docs/current/static/release-8-4-4.html
http://www.securityfocus.com/bid/40304
http://www.vupen.com/english/advisories/2010/1207
http://www.vupen.com/english/advisories/2010/1221
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11004
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
http://marc.info/?l=bugtraq&m=134124585221119&w=2
http://marc.info/?l=bugtraq&m=134124585221119&w=2
http://secunia.com/advisories/39939
http://www.debian.org/security/2010/dsa-2051
http://www.mandriva.com/security/advisories?name=MDVSA-2010:103
http://www.postgresql.org/docs/current/static/release-7-4-29.html
http://www.postgresql.org/docs/current/static/release-8-0-25.html
http://www.postgresql.org/docs/current/static/release-8-1-21.html
http://www.postgresql.org/docs/current/static/release-8-2-17.html
http://www.postgresql.org/docs/current/static/release-8-3-11.html
http://www.postgresql.org/docs/current/static/release-8-4-4.html
http://www.securityfocus.com/bid/40304
http://www.vupen.com/english/advisories/2010/1207
http://www.vupen.com/english/advisories/2010/1221
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11004
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.13:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.14:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.15:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.16:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.17:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.18:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.19:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.20:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.21:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.22:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.23:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.24:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.25:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.26:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.27:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.28:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.0:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.8:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.9:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.10:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.11:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.12:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.13:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.14:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.15:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.16:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.17:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.18:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.19:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.20:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.21:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.22:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.23:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.24:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:postgresql:postgresql:8.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.0:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.8:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.9:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.10:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.11:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.12:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.13:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.14:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.15:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.16:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.17:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.18:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.19:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.20:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.8:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.9:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.10:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.11:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.12:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.13:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.14:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.15:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.16:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:postgresql:postgresql:8.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.8:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.9:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.10:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:a:postgresql:postgresql:8.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.4.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.4.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.4.3:*:*:*:*:*:*:*

Configuration 7 (hide)

cpe:2.3:a:postgresql:postgresql:9.0.0:beta1:*:*:*:*:*:*

History

21 Nov 2024, 01:15

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - () http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html -
References () http://marc.info/?l=bugtraq&m=134124585221119&w=2 - () http://marc.info/?l=bugtraq&m=134124585221119&w=2 -
References () http://secunia.com/advisories/39939 - () http://secunia.com/advisories/39939 -
References () http://www.debian.org/security/2010/dsa-2051 - () http://www.debian.org/security/2010/dsa-2051 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2010:103 - () http://www.mandriva.com/security/advisories?name=MDVSA-2010:103 -
References () http://www.postgresql.org/docs/current/static/release-7-4-29.html - () http://www.postgresql.org/docs/current/static/release-7-4-29.html -
References () http://www.postgresql.org/docs/current/static/release-8-0-25.html - () http://www.postgresql.org/docs/current/static/release-8-0-25.html -
References () http://www.postgresql.org/docs/current/static/release-8-1-21.html - () http://www.postgresql.org/docs/current/static/release-8-1-21.html -
References () http://www.postgresql.org/docs/current/static/release-8-2-17.html - () http://www.postgresql.org/docs/current/static/release-8-2-17.html -
References () http://www.postgresql.org/docs/current/static/release-8-3-11.html - () http://www.postgresql.org/docs/current/static/release-8-3-11.html -
References () http://www.postgresql.org/docs/current/static/release-8-4-4.html - () http://www.postgresql.org/docs/current/static/release-8-4-4.html -
References () http://www.securityfocus.com/bid/40304 - () http://www.securityfocus.com/bid/40304 -
References () http://www.vupen.com/english/advisories/2010/1207 - () http://www.vupen.com/english/advisories/2010/1207 -
References () http://www.vupen.com/english/advisories/2010/1221 - () http://www.vupen.com/english/advisories/2010/1221 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11004 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11004 -

Information

Published : 2010-05-19 18:30

Updated : 2024-11-21 01:15


NVD link : CVE-2010-1975

Mitre link : CVE-2010-1975

CVE.ORG link : CVE-2010-1975


JSON object : View

Products Affected

postgresql

  • postgresql
CWE
CWE-264

Permissions, Privileges, and Access Controls