Description

The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.

Remediation

References

CVE-2014-0067

Related Vulnerabilities

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.19)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2200)

Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2022-23943)

WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile Cross-Site Scripting (1.5.5)

Ruby on Rails Improper Input Validation Vulnerability (CVE-2011-3187)

Severity

Medium

Classification

CVE-2014-0067 CWE-264

Tags

Missing Update Known Vulnerabilities