Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2009-3230
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-17 Sep, 2009 | 10:30
Updated At-23 Apr, 2026 | 00:35

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.06.5MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
Type: Primary
Version: 2.0
Base score: 6.5
Base severity: MEDIUM
Vector:
AV:N/AC:L/Au:S/C:P/I:P/A:P
CPE Matches
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4
cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.1
cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.2
cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.3
cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.4
cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.5
cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.6
cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.7
cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.8
cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.9
cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.10
cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.11
cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.12
cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.13
cpe:2.3:a:postgresql:postgresql:7.4.13:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.14
cpe:2.3:a:postgresql:postgresql:7.4.14:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.15
cpe:2.3:a:postgresql:postgresql:7.4.15:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.16
cpe:2.3:a:postgresql:postgresql:7.4.16:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.17
cpe:2.3:a:postgresql:postgresql:7.4.17:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.18
cpe:2.3:a:postgresql:postgresql:7.4.18:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.19
cpe:2.3:a:postgresql:postgresql:7.4.19:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.20
cpe:2.3:a:postgresql:postgresql:7.4.20:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.21
cpe:2.3:a:postgresql:postgresql:7.4.21:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.22
cpe:2.3:a:postgresql:postgresql:7.4.22:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.23
cpe:2.3:a:postgresql:postgresql:7.4.23:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.24
cpe:2.3:a:postgresql:postgresql:7.4.24:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>7.4.25
cpe:2.3:a:postgresql:postgresql:7.4.25:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0
cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.1
cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.2
cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.3
cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.4
cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.5
cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.6
cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.7
cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.8
cpe:2.3:a:postgresql:postgresql:8.0.8:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.9
cpe:2.3:a:postgresql:postgresql:8.0.9:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.10
cpe:2.3:a:postgresql:postgresql:8.0.10:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.11
cpe:2.3:a:postgresql:postgresql:8.0.11:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.12
cpe:2.3:a:postgresql:postgresql:8.0.12:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.13
cpe:2.3:a:postgresql:postgresql:8.0.13:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.14
cpe:2.3:a:postgresql:postgresql:8.0.14:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.15
cpe:2.3:a:postgresql:postgresql:8.0.15:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.16
cpe:2.3:a:postgresql:postgresql:8.0.16:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.17
cpe:2.3:a:postgresql:postgresql:8.0.17:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.18
cpe:2.3:a:postgresql:postgresql:8.0.18:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.19
cpe:2.3:a:postgresql:postgresql:8.0.19:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.20
cpe:2.3:a:postgresql:postgresql:8.0.20:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.0.21
cpe:2.3:a:postgresql:postgresql:8.0.21:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.1
cpe:2.3:a:postgresql:postgresql:8.1:*:*:*:*:*:*:*
The PostgreSQL Global Development Group
postgresql
>>postgresql>>8.1.1
cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-264Primarynvd@nist.gov
CWE ID: CWE-264
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://archives.postgresql.org/pgsql-www/2009-09/msg00024.phpcve@mitre.org
N/A
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.htmlcve@mitre.org
N/A
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.htmlcve@mitre.org
N/A
http://marc.info/?l=bugtraq&m=134124585221119&w=2cve@mitre.org
N/A
http://secunia.com/advisories/36660cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/36695cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/36727cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/36800cve@mitre.org
N/A
http://secunia.com/advisories/36837cve@mitre.org
N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1cve@mitre.org
N/A
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012cve@mitre.org
N/A
http://www.postgresql.org/docs/8.3/static/release-8-3-8.htmlcve@mitre.org
Vendor Advisory
http://www.postgresql.org/support/security.htmlcve@mitre.org
Vendor Advisory
http://www.securityfocus.com/archive/1/509917/100/0/threadedcve@mitre.org
N/A
http://www.securityfocus.com/bid/36314cve@mitre.org
N/A
http://www.ubuntu.com/usn/usn-834-1cve@mitre.org
N/A
http://www.us.debian.org/security/2009/dsa-1900cve@mitre.org
N/A
http://www.vupen.com/english/advisories/2009/2602cve@mitre.org
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=522085cve@mitre.org
N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10166cve@mitre.org
N/A
https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.htmlcve@mitre.org
N/A
https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.htmlcve@mitre.org
N/A
http://archives.postgresql.org/pgsql-www/2009-09/msg00024.phpaf854a3a-2127-422b-91ae-364da2661108
N/A
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://marc.info/?l=bugtraq&m=134124585221119&w=2af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/36660af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/36695af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/36727af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/36800af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/36837af854a3a-2127-422b-91ae-364da2661108
N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1af854a3a-2127-422b-91ae-364da2661108
N/A
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.postgresql.org/docs/8.3/static/release-8-3-8.htmlaf854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.postgresql.org/support/security.htmlaf854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.securityfocus.com/archive/1/509917/100/0/threadedaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/36314af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.ubuntu.com/usn/usn-834-1af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.us.debian.org/security/2009/dsa-1900af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.vupen.com/english/advisories/2009/2602af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=522085af854a3a-2127-422b-91ae-364da2661108
N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10166af854a3a-2127-422b-91ae-364da2661108
N/A
https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://archives.postgresql.org/pgsql-www/2009-09/msg00024.php
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://marc.info/?l=bugtraq&m=134124585221119&w=2
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/36660
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/36695
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/36727
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/36800
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/36837
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.postgresql.org/docs/8.3/static/release-8-3-8.html
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://www.postgresql.org/support/security.html
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://www.securityfocus.com/archive/1/509917/100/0/threaded
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/36314
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.ubuntu.com/usn/usn-834-1
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.us.debian.org/security/2009/dsa-1900
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2009/2602
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=522085
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10166
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://archives.postgresql.org/pgsql-www/2009-09/msg00024.php
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://marc.info/?l=bugtraq&m=134124585221119&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/advisories/36660
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/36695
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/36727
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/36800
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/advisories/36837
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.postgresql.org/docs/8.3/static/release-8-3-8.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.postgresql.org/support/security.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.securityfocus.com/archive/1/509917/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/36314
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.ubuntu.com/usn/usn-834-1
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.us.debian.org/security/2009/dsa-1900
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2009/2602
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=522085
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10166
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found