ID de Prueba:	1.3.6.1.4.1.25623.1.0.811582
Categoría:	Databases
Título:	PostgreSQL Privilege Escalation Vulnerability - August17 (Linux)
Resumen:	PostgreSQL is prone to a privilege escalation vulnerability.
Descripción:	Summary: PostgreSQL is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to the 'lo_put' function which should require the same permissions as 'lowrite' function, but there was a missing permission check. Vulnerability Impact: Successful exploitation will allow a remote attacker to gain extra privileges and conduct a denial of service condition. Affected Software/OS: PostgreSQL version 9.4.x before 9.4.13, and 9.5.x before 9.5.8 and 9.6.x before 9.6.4. Solution: Upgrade to version 9.4.13 or 9.5.8 or 9.6.4 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Referencia Cruzada:	BugTraq ID: 100276 Common Vulnerability Exposure (CVE) ID: CVE-2017-7548 http://www.securityfocus.com/bid/100276 Debian Security Information: DSA-3935 (Google Search) http://www.debian.org/security/2017/dsa-3935 Debian Security Information: DSA-3936 (Google Search) http://www.debian.org/security/2017/dsa-3936 https://security.gentoo.org/glsa/201710-06 RedHat Security Advisories: RHSA-2017:2677 https://access.redhat.com/errata/RHSA-2017:2677 RedHat Security Advisories: RHSA-2017:2678 https://access.redhat.com/errata/RHSA-2017:2678 http://www.securitytracker.com/id/1039142
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.