Description

The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.

Remediation

References

CVE-2014-0067

Related Vulnerabilities

WordPress Plugin Jibu Pro Cross-Site Scripting (1.7)

WordPress Plugin Yasr-Yet Another Stars Rating Unspecified Vulnerability (0.9.1)

osTicket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-42235)

Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2015-3416)

osCommerce Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2002-2019)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2014-0067