CVE-2009-3230: Medium severity postgresql common vulnerability
Quoting upstream PostgreSQL security page: http://www.postgresql.org/support/security.html
The fix for issue CVE-2007-2138 (below) failed to include protection against misuse of RESET SESSION AUTHORIZATION.
Affected versions: 8.4, 8.3, 8.2, 8.1, 8.0, 7.4 (note: this may affect previous 7.x versions too, but upstream does not support pre-7.4 versions any more)
Fixed in versions: 8.4.1, 8.3.8, 8.2.14, 8.1.18, 8.0.22, 7.4.26
Severity: C - A vulnerabilty that is exploitable for privilege escalation, but requiring a valid prior login.
CVE-2007-2138 was previously tracked via bug #237680 and bug #237682, more info on the updates addressing this flaw is available at: https://www.redhat.com/security/data/cve/CVE-2007-2138.html
Other sources
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2009-3230?
CVE-2009-3230 is rated as a medium severity vulnerability.
How do I fix CVE-2009-3230?
To fix CVE-2009-3230, upgrade your PostgreSQL version to 8.4.1 or higher, 8.3.8 or higher, 8.2.14 or higher, and so on as specified.
What versions of PostgreSQL are affected by CVE-2009-3230?
CVE-2009-3230 affects PostgreSQL versions 7.4 to 8.4, including various sub-versions.
Can CVE-2009-3230 be exploited remotely?
Yes, CVE-2009-3230 can be exploited remotely by authenticated users.
What operations are improperly handled in CVE-2009-3230?
CVE-2009-3230 involves improper privilege handling for the RESET ROLE and RESET SESSION AUTHORIZATION operations.