Summary
This host is installed with PostgreSQL and is prone to local privilege escalation vulnerability.
Impact
Successful exploitation may allow local attacker to gain temporary server access and elevated privileges.
Impact Level: System/Application
Solution
No Solution or patch is available as of 7th July, 2014. Information regarding this issue will updated once the solution details are available.
For updates refer to http://www.postgresql.org/download
Insight
Flaw is due to an error when creating a PostgreSQL database cluster during 'make check'.
Affected
PostgreSQL version 9.3.3 and earlier
Detection
Get the installed version with the help of detect NVT and check the version is vulnerable or not.
References
Severity
Classification
-
CVE CVE-2014-0067 -
CVSS Base Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Oracle MySQL Multiple Unspecified vulnerabilities - 01 May14 (Windows)
- IBM DB2 REPEAT Buffer Overflow and TLS Renegotiation Vulnerabilities (Win)
- MySQL Authentication Error Message User Enumeration Vulnerability
- IBM DB2 Self Tuning Memory Manager (STMM) DOS Vulnerability (Win)
- Oracle MySQL Multiple Unspecified vulnerabilities-03 Feb15 (Windows)