CVE-2009-3230

Executive Summary

Informations
Name	CVE-2009-3230	First vendor Publication	2009-09-17
Vendor	Cve	Last vendor Modification	2010-08-21

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:S/C:P/I:P/A:P)
Cvss Base Score	6.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	8	Authentification	Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3230

CAPEC : Common Attack Pattern Enumeration & Classification

id	Name
CAPEC-1	Accessing Functionality Not Properly Constrained by ACLs
CAPEC-13	Subverting Environment Variable Values
CAPEC-17	Accessing, Modifying or Executing Executable Files
CAPEC-39	Manipulating Opaque Client-based Data Tokens
CAPEC-45	Buffer Overflow via Symbolic Links
CAPEC-51	Poison Web Service Registry
CAPEC-59	Session Credential Falsification through Prediction
CAPEC-60	Reusing Session IDs (aka Session Replay)
CAPEC-76	Manipulating Input to File System Calls
CAPEC-77	Manipulating User-Controlled Variables
CAPEC-87	Forceful Browsing
CAPEC-104	Cross Zone Scripting

CWE : Common Weakness Enumeration

id	Name
CWE-285	Improper Access Control (Authorization)
CWE-264	Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10166

Oval ID:	oval:org.mitre.oval:def:10166
Title:	The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.
Description:	The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3230	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section rh-postgresql-devel is earlier than 0:7.3.21-2 AND rh-postgresql-server is earlier than 0:7.3.21-2 AND rh-postgresql-python is earlier than 0:7.3.21-2 AND rh-postgresql-libs is earlier than 0:7.3.21-2 AND rh-postgresql-docs is earlier than 0:7.3.21-2 AND rh-postgresql-test is earlier than 0:7.3.21-2 AND rh-postgresql-pl is earlier than 0:7.3.21-2 AND rh-postgresql-tcl is earlier than 0:7.3.21-2 AND rh-postgresql is earlier than 0:7.3.21-2 AND rh-postgresql-contrib is earlier than 0:7.3.21-2 AND rh-postgresql-jdbc is earlier than 0:7.3.21-2 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section postgresql is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-docs is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-pl is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-tcl is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-libs is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-contrib is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-python is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-test is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-jdbc is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-server is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-devel is earlier than 0:7.4.26-1.el4_8.1 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section postgresql is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-docs is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-pl is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-tcl is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-libs is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-contrib is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-python is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-test is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-server is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-devel is earlier than 0:8.1.18-2.el5_4.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Postgresql Postgresql cpe:/a:postgresql:postgresql:8.4 cpe:/a:postgresql:postgresql:8.3.7 cpe:/a:postgresql:postgresql:8.3.6 cpe:/a:postgresql:postgresql:8.3.5 cpe:/a:postgresql:postgresql:8.3.4 cpe:/a:postgresql:postgresql:8.3.3 cpe:/a:postgresql:postgresql:8.3.2 cpe:/a:postgresql:postgresql:8.3.1 cpe:/a:postgresql:postgresql:8.2.9 cpe:/a:postgresql:postgresql:8.2.8 cpe:/a:postgresql:postgresql:8.2.7 cpe:/a:postgresql:postgresql:8.2.6 cpe:/a:postgresql:postgresql:8.2.5 cpe:/a:postgresql:postgresql:8.2.4 cpe:/a:postgresql:postgresql:8.2.3 cpe:/a:postgresql:postgresql:8.2.2 cpe:/a:postgresql:postgresql:8.2.13 cpe:/a:postgresql:postgresql:8.2.12 cpe:/a:postgresql:postgresql:8.2.11 cpe:/a:postgresql:postgresql:8.2.10 cpe:/a:postgresql:postgresql:8.2.1 cpe:/a:postgresql:postgresql:8.2 cpe:/a:postgresql:postgresql:8.1.9 cpe:/a:postgresql:postgresql:8.1.8 cpe:/a:postgresql:postgresql:8.1.7 cpe:/a:postgresql:postgresql:8.1.6 cpe:/a:postgresql:postgresql:8.1.5 cpe:/a:postgresql:postgresql:8.1.4 cpe:/a:postgresql:postgresql:8.1.3 cpe:/a:postgresql:postgresql:8.1.2 cpe:/a:postgresql:postgresql:8.1.16 cpe:/a:postgresql:postgresql:8.1.15 cpe:/a:postgresql:postgresql:8.1.14 cpe:/a:postgresql:postgresql:8.1.13 cpe:/a:postgresql:postgresql:8.1.12 cpe:/a:postgresql:postgresql:8.1.11 cpe:/a:postgresql:postgresql:8.1.10 cpe:/a:postgresql:postgresql:8.1.1 cpe:/a:postgresql:postgresql:8.1 cpe:/a:postgresql:postgresql:8.0.9 cpe:/a:postgresql:postgresql:8.0.8 cpe:/a:postgresql:postgresql:8.0.7 cpe:/a:postgresql:postgresql:8.0.6 cpe:/a:postgresql:postgresql:8.0.5 cpe:/a:postgresql:postgresql:8.0.4 cpe:/a:postgresql:postgresql:8.0.3 cpe:/a:postgresql:postgresql:8.0.21 cpe:/a:postgresql:postgresql:8.0.20 cpe:/a:postgresql:postgresql:8.0.2 cpe:/a:postgresql:postgresql:8.0.19 cpe:/a:postgresql:postgresql:8.0.18 cpe:/a:postgresql:postgresql:8.0.17 cpe:/a:postgresql:postgresql:8.0.16 cpe:/a:postgresql:postgresql:8.0.15 cpe:/a:postgresql:postgresql:8.0.14 cpe:/a:postgresql:postgresql:8.0.13 cpe:/a:postgresql:postgresql:8.0.12 cpe:/a:postgresql:postgresql:8.0.11 cpe:/a:postgresql:postgresql:8.0.10 cpe:/a:postgresql:postgresql:8.0.1 cpe:/a:postgresql:postgresql:8.0 cpe:/a:postgresql:postgresql:7.4.9 cpe:/a:postgresql:postgresql:7.4.8 cpe:/a:postgresql:postgresql:7.4.7 cpe:/a:postgresql:postgresql:7.4.6 cpe:/a:postgresql:postgresql:7.4.5 cpe:/a:postgresql:postgresql:7.4.4 cpe:/a:postgresql:postgresql:7.4.3 cpe:/a:postgresql:postgresql:7.4.25 cpe:/a:postgresql:postgresql:7.4.24 cpe:/a:postgresql:postgresql:7.4.23 cpe:/a:postgresql:postgresql:7.4.22 cpe:/a:postgresql:postgresql:7.4.21 cpe:/a:postgresql:postgresql:7.4.20 cpe:/a:postgresql:postgresql:7.4.2 cpe:/a:postgresql:postgresql:7.4.19 cpe:/a:postgresql:postgresql:7.4.18 cpe:/a:postgresql:postgresql:7.4.17 cpe:/a:postgresql:postgresql:7.4.16 cpe:/a:postgresql:postgresql:7.4.15 cpe:/a:postgresql:postgresql:7.4.14 cpe:/a:postgresql:postgresql:7.4.13 cpe:/a:postgresql:postgresql:7.4.12 cpe:/a:postgresql:postgresql:7.4.11 cpe:/a:postgresql:postgresql:7.4.10 cpe:/a:postgresql:postgresql:7.4.1 cpe:/a:postgresql:postgresql:7.4	87

Open Source Vulnerability Database (OSVDB)

id	Description
57901	PostgreSQL RESET SESSION AUTHORIZATION Remote Privilege Escalation

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/36314
BUGTRAQ	http://www.securityfocus.com/archive/1/archive/1/509917/100/0/threaded
CONFIRM	http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012 http://www.postgresql.org/docs/8.3/static/release-8-3-8.html http://www.postgresql.org/support/security.html https://bugzilla.redhat.com/show_bug.cgi?id=522085
DEBIAN	http://www.us.debian.org/security/2009/dsa-1900
FEDORA	https://www.redhat.com/archives/fedora-package-announce/2009-September/msg003... https://www.redhat.com/archives/fedora-package-announce/2009-September/msg003...
MLIST	http://archives.postgresql.org/pgsql-www/2009-09/msg00024.php
SECUNIA	http://secunia.com/advisories/36660 http://secunia.com/advisories/36695 http://secunia.com/advisories/36727 http://secunia.com/advisories/36800 http://secunia.com/advisories/36837
SUNALERT	http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1
SUSE	http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
UBUNTU	http://www.ubuntu.com/usn/usn-834-1
VUPEN	http://www.vupen.com/english/advisories/2009/2602

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 23:57:26	Multiple Updates

Type	Count
Capec ID(s)	12
CWE ID(s)	1
Oval ID(s)	1
CPE ID(s)	87
osvdb(s)	1

Related	Severity
RHSA-2009:1461	(High)
HPSBMU02781 SSR...	(High)
GLSA-201110-22	(High)
USN-834-1	(Medium)
SUN-270408	(Medium)
MDVSA-2009:251-1	(Medium)
MDVSA-2009:177	(Medium)
DSA-1900	(Medium)
RHSA-2009:1485	(Medium)
RHSA-2009:1484	(Medium)
MDVSA-2009:333	(Medium)
MDVSA-2009:176	(Medium)