The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://wiki.postgresql.org/wiki/20140220securityrelease | x_refsource_CONFIRM |
| http://www.debian.org/security/2014/dsa-2864 | vendor-advisory x_refsource_DEBIAN |
| http://www.postgresql.org/about/news/1506/ | x_refsource_CONFIRM |
| http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html | vendor-advisory x_refsource_APPLE |
| http://www.debian.org/security/2014/dsa-2865 | vendor-advisory x_refsource_DEBIAN |
| http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html | vendor-advisory x_refsource_SUSE |
| http://www.securityfocus.com/bid/65721 | vdb-entry x_refsource_BID |
| https://support.apple.com/kb/HT205031 | x_refsource_CONFIRM |
| http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html | vendor-advisory x_refsource_APPLE |
| http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html | vendor-advisory x_refsource_SUSE |
| https://support.apple.com/HT205219 | x_refsource_CONFIRM |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 4.6 | MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |