| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | = 8.4.1= 8.4.10= 8.4.11= 8.4.12= 8.4.13= 8.4.14= 8.4.15= 8.4.16= 8.4.17= 8.4.18= 8.4.2= 8.4.3= 8.4.4= 8.4.5= 8.4.6= 8.4.7= 8.4.8= 8.4.9= 9.0= 9.0.1= 9.0.10= 9.0.11= 9.0.12= 9.0.13= 9.0.14= 9.0.15= 9.0.2= 9.0.3= 9.0.4= 9.0.5= 9.0.6= 9.0.7= 9.0.8= 9.0.9= 9.1= 9.1.1= 9.1.10= 9.1.11= 9.1.2= 9.1.3= 9.1.4= 9.1.5= 9.1.6= 9.1.7= 9.1.8= 9.1.9= 9.2= 9.2.1= 9.2.2= 9.2.3= 9.2.4= 9.2.5= 9.2.6= 9.3= 9.3.1= 9.3.2≤ 8.4.19 |
The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free