#VU43839 Permissions, Privileges, and Access Controls in PostgreSQL - CVE-2012-0866
Vulnerability identifier: #VU43839
Vulnerability risk: Low
CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2012-0866
CWE-ID:
CWE-264
Exploitation vector: Network
Exploit availability: No
Vulnerable software:
PostgreSQL
Server applications /
Database software
Vendor: PostgreSQL Global Development Group
Description
The vulnerability allows a remote #AU# to read and manipulate data.
CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.
Mitigation
Install update from vendor's website.
Vulnerable software versions
PostgreSQL: 8.3 - 8.3.17, 8.4 - 8.4.10, 9.0 - 9.0.6, 9.1 - 9.1.2
External links
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
https://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html
https://rhn.redhat.com/errata/RHSA-2012-0677.html
https://rhn.redhat.com/errata/RHSA-2012-0678.html
https://secunia.com/advisories/49272
https://secunia.com/advisories/49273
https://www.debian.org/security/2012/dsa-2418
https://www.mandriva.com/security/advisories?name=MDVSA-2012:026
https://www.mandriva.com/security/advisories?name=MDVSA-2012:027
https://www.mandriva.com/security/advisories?name=MDVSA-2012:092
https://www.postgresql.org/about/news/1377/
https://www.postgresql.org/docs/8.3/static/release-8-3-18.html
https://www.postgresql.org/docs/8.4/static/release-8-4-11.html
https://www.postgresql.org/docs/9.0/static/release-9-0-7.html
https://www.postgresql.org/docs/9.1/static/release-9-1-3.html
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
