PostgreSQL is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to reset special parameter settings only a root user should be able to modify. This may aid in further attacks. This issue affects versions prior to the following PostgreSQL versions: 7.4.29, 8.0.25 8.1.21, 8.2.17 8.3.11 8.4.4

Updates are available. Please see the references for more information.

• http://www.postgresql.org/
• http://www.postgresql.org/docs/current/static/release-7-4-29.html
• http://www.postgresql.org/docs/current/static/release-8-0-25.html
• http://www.postgresql.org/docs/current/static/release-8-1-21.html
• http://www.postgresql.org/docs/current/static/release-8-2-17.html
• http://www.postgresql.org/docs/current/static/release-8-3-11.html
• http://www.postgresql.org/docs/current/static/release-8-4-4.html
• http://www.securityfocus.com/bid/40304

---

Updated on 2015-03-25