CVE-2012-0866

First published: Wed Jul 18 2012(Updated: )

CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.

Credit: secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• collector/nvd-index
• agent/software-canonical-lookup-request
• agent/references
• agent/weakness
• agent/severity
• agent/author
• agent/softwarecombine
• agent/description
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/tags
• agent/first-publish-date
• agent/event
• agent/source
• vendor/postgresql
• canonical/postgresql postgresql
• version/postgresql postgresql/8.3
• version/postgresql postgresql/8.3.1
• version/postgresql postgresql/8.3.2
• version/postgresql postgresql/8.3.3
• version/postgresql postgresql/8.3.4
• version/postgresql postgresql/8.3.5
• version/postgresql postgresql/8.3.6
• version/postgresql postgresql/8.3.7
• version/postgresql postgresql/8.3.8
• version/postgresql postgresql/8.3.9
• version/postgresql postgresql/8.3.10
• version/postgresql postgresql/8.3.11
• version/postgresql postgresql/8.3.12
• version/postgresql postgresql/8.3.13
• version/postgresql postgresql/8.3.14
• version/postgresql postgresql/8.3.15
• version/postgresql postgresql/8.3.16
• version/postgresql postgresql/8.3.17
• version/postgresql postgresql/8.4
• version/postgresql postgresql/8.4.1
• version/postgresql postgresql/8.4.2
• version/postgresql postgresql/8.4.3
• version/postgresql postgresql/8.4.4
• version/postgresql postgresql/8.4.5
• version/postgresql postgresql/8.4.6
• version/postgresql postgresql/8.4.7
• version/postgresql postgresql/8.4.8
• version/postgresql postgresql/8.4.9
• version/postgresql postgresql/8.4.10
• version/postgresql postgresql/9.0
• version/postgresql postgresql/9.0.1
• version/postgresql postgresql/9.0.2
• version/postgresql postgresql/9.0.3
• version/postgresql postgresql/9.0.4
• version/postgresql postgresql/9.0.5
• version/postgresql postgresql/9.0.6
• version/postgresql postgresql/9.1
• version/postgresql postgresql/9.1.1
• version/postgresql postgresql/9.1.2