CVE-2006-0553

PostgreSQL 8.1.0-8.1.2 - Authenticated Privilege Escalation via SET ROLE

Title source: llm
STIX 2.1

Description

PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" using a crafted SET ROLE to other database users, a different vulnerability than CVE-2006-0678.

References (10)

Core 10
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0605
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18890
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/567452
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16649
Various Sources mailing-list x_refsource_mlist
http://archives.postgresql.org/pgsql-announce/2006-02/msg00008.php
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015636
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24718
Vendor Advisory vendor-advisory x_refsource_openpkg
http://www.openpkg.org/security/OpenPKG-SA-2006.004-postgresql.html
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/425037/100/0/threaded

Scores

EPSS 0.0184
EPSS Percentile 83.2%

Details

CWE
CWE-264
Status published
Products (3)
postgresql/postgresql 8.1.0
postgresql/postgresql 8.1.1
postgresql/postgresql 8.1.2
Published Feb 14, 2006
Tracked Since Feb 18, 2026