Description

PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" using a crafted SET ROLE to other database users, a different vulnerability than CVE-2006-0678.

Remediation

References

CVE-2006-0553

Related Vulnerabilities

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-6844)

WordPress Plugin BackUpWordPress Unspecified Vulnerability (3.12)

MySQL Other Vulnerability (CVE-2006-0903)

WordPress Plugin WP Glossary 'ajax.php' SQL Injection (0.1)

Oracle Application Server Other Vulnerability (CVE-2006-5354)

Severity

Medium

Classification

CVE-2006-0553 CWE-264

Tags

Missing Update Known Vulnerabilities