Test Kennung:	1.3.6.1.4.1.25623.1.0.811582
Kategorie:	Databases
Titel:	PostgreSQL Privilege Escalation Vulnerability - August17 (Linux)
Zusammenfassung:	PostgreSQL is prone to a privilege escalation vulnerability.
Beschreibung:	Summary: PostgreSQL is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to the 'lo_put' function which should require the same permissions as 'lowrite' function, but there was a missing permission check. Vulnerability Impact: Successful exploitation will allow a remote attacker to gain extra privileges and conduct a denial of service condition. Affected Software/OS: PostgreSQL version 9.4.x before 9.4.13, and 9.5.x before 9.5.8 and 9.6.x before 9.6.4. Solution: Upgrade to version 9.4.13 or 9.5.8 or 9.6.4 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Querverweis:	BugTraq ID: 100276 Common Vulnerability Exposure (CVE) ID: CVE-2017-7548 http://www.securityfocus.com/bid/100276 Debian Security Information: DSA-3935 (Google Search) http://www.debian.org/security/2017/dsa-3935 Debian Security Information: DSA-3936 (Google Search) http://www.debian.org/security/2017/dsa-3936 https://security.gentoo.org/glsa/201710-06 RedHat Security Advisories: RHSA-2017:2677 https://access.redhat.com/errata/RHSA-2017:2677 RedHat Security Advisories: RHSA-2017:2678 https://access.redhat.com/errata/RHSA-2017:2678 http://www.securitytracker.com/id/1039142
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.