← Back

CVE-2014-0067

nvd nist
Published: Mar 31, 2014Modified: May 6, 2026

JSON object

Loading...
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD

Description

The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.

Affected (59)

2 products
Mac Os X
Mac Os X Server
1 product
Postgresql
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Version 10.10.4
Version 5.0.3
Configuration B
57 vulnerable
Vulnerable SoftwareAffected Versions
Postgresql
Up to 8.4.19
Version 8.4.10
Version 8.4.11
Version 8.4.12
Version 8.4.13
Version 8.4.14
Version 8.4.15
Version 8.4.16
Version 8.4.17
Version 8.4.18
Version 8.4.1
Version 8.4.2
Version 8.4.3
Version 8.4.4
Version 8.4.5
Version 8.4.6
Version 8.4.7
Version 8.4.8
Version 8.4.9
Version 9.0.10
Version 9.0.11
Version 9.0.12
Version 9.0.13
Version 9.0.14
Version 9.0.15
Version 9.0.1
Version 9.0.2
Version 9.0.3
Version 9.0.4
Version 9.0.5
Version 9.0.6
Version 9.0.7
Version 9.0.8
Version 9.0.9
Version 9.0
Version 9.1.10
Version 9.1.11
Version 9.1.1
Version 9.1.2
Version 9.1.3
Version 9.1.4
Version 9.1.5
Version 9.1.6
Version 9.1.7
Version 9.1.8
Version 9.1.9
Version 9.1
Version 9.2.1
Version 9.2.2
Version 9.2.3
Version 9.2.4
Version 9.2.5
Version 9.2.6
Version 9.2
Version 9.3.1
Version 9.3.2
Version 9.3

Related CWEs

References (22)

Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.