CVE-2014-0067

postgresql: Vulnerability during "make check"

Published Mar 28, 2014 CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-0019-1 postgresql-8.4 update
Debian DSA Debian DSA DSA-2864-1 postgresql-8.4 security update
Debian DSA Debian DSA DSA-2865-1 postgresql-9.1 security update
EUVD EUVD EUVD-2014-0160 The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 9:05 AM
Reserved
Dec 3, 2013, 12:00 AM
Status
Modified
Published
Mar 31, 2014, 2:58 PM
Modified
Jun 17, 2026, 12:02 AM
Severity
Low
Public date
Feb 17, 2014, 12:00 AM