CVE ID:	CVE-2010-1975
Description:	PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement.
Test IDs:	1.3.6.1.4.1.25623.1.0.100648   1.3.6.1.4.1.25623.1.0.67404
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1975 BugTraq ID: 40304 http://www.securityfocus.com/bid/40304 Debian Security Information: DSA-2051 (Google Search) http://www.debian.org/security/2010/dsa-2051 HPdes Security Advisory: HPSBMU02781 http://marc.info/?l=bugtraq&m=134124585221119&w=2 HPdes Security Advisory: SSRT100617 http://marc.info/?l=bugtraq&m=134124585221119&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2010:103 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11004 http://secunia.com/advisories/39939 SuSE Security Announcement: SUSE-SR:2010:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html http://www.vupen.com/english/advisories/2010/1207 http://www.vupen.com/english/advisories/2010/1221