Description

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.

Remediation

References

CVE-2007-6600

Related Vulnerabilities

ownCloud Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-35947)

WordPress Plugin W3 Total Cache Server-Side Request Forgery (0.9.7.3)

osTicket Integer Overflow or Wraparound Vulnerability (CVE-2018-7194)

osTicket Session Fixation Vulnerability (CVE-2022-31888)

SugarCRM Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2019-17315)

Severity

Medium

Classification

CVE-2007-6600 CWE-264

Tags

Missing Update Known Vulnerabilities