postgresql: EXECUTE privilege vulnerability [LWN.net]

Package(s):

postgresql

CVE #(s):

CAN-2005-0244 CAN-2005-0245 CAN-2005-0246 CAN-2005-0247

Created:

February 10, 2005

Updated:

July 19, 2005

Description:

postgresql has a vulnerability in which the EXECUTE privilege may not be checked on custom functions. This may allow any database user to circumvent the EXECUTE restriction on functions.

Alerts:

Fedora-Legacy	FLSA:152844	2005-07-16
Trustix	TSLSA-2005-0015	2005-04-25
SuSE	SUSE-SA:2005:027	2005-04-20
SuSE	SUSE-SR:2005:008	2005-03-18
SuSE	SUSE-SR:2005:006	2005-02-25
Fedora	FEDORA-2005-158	2005-02-22
Fedora	FEDORA-2005-157	2005-02-22
Mandrake	MDKSA-2005:040	2005-02-17
Red Hat	RHSA-2005:150-01	2005-02-16
Debian	DSA-683-1	2005-02-15
Red Hat	RHSA-2005:138-01	2005-02-15
Gentoo	200502-19	2005-02-14
Ubuntu	USN-79-1	2005-02-10

(Log in to post comments)