CVE-2006-0553: Medium severity PostgreSQL postgresql vulnerability
Published Feb 14, 2006
·Updated
PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" using a crafted SET ROLE to other database users, a different vulnerability than CVE-2006-0678.
Affected Software
3 affected components
PostgreSQL postgresql=8.1.0
PostgreSQL postgresql=8.1.1
PostgreSQL postgresql=8.1.2
Remediation
Patch Available
Event History
Feb 14, 2006
CVE Published
07:06 PM
Feb 15, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0553?
CVE-2006-0553 has a medium severity rating due to the potential for privilege escalation by authenticated database users.
2
How do I fix CVE-2006-0553?
To fix CVE-2006-0553, upgrade PostgreSQL to a version later than 8.1.2 where the vulnerability has been addressed.
3
Which versions of PostgreSQL are affected by CVE-2006-0553?
CVE-2006-0553 affects PostgreSQL versions 8.1.0, 8.1.1, and 8.1.2.
4
What types of users are impacted by CVE-2006-0553?
Authenticated database users are impacted by CVE-2006-0553 as it allows them to escalate privileges.
5
Are there any workarounds for CVE-2006-0553?
There are no known effective workarounds for CVE-2006-0553, so upgrading is recommended.