CVE ID:	CVE-2014-0062
Description:	Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allows remote authenticated users to create an unauthorized index or read portions of unauthorized tables by creating or deleting a table with the same name during the timing window.
Test IDs:	1.3.6.1.4.1.25623.1.0.702865   1.3.6.1.4.1.25623.1.0.702864
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0062 http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html BugTraq ID: 65727 http://www.securityfocus.com/bid/65727 Debian Security Information: DSA-2864 (Google Search) http://www.debian.org/security/2014/dsa-2864 Debian Security Information: DSA-2865 (Google Search) http://www.debian.org/security/2014/dsa-2865 RedHat Security Advisories: RHSA-2014:0211 http://rhn.redhat.com/errata/RHSA-2014-0211.html RedHat Security Advisories: RHSA-2014:0221 http://rhn.redhat.com/errata/RHSA-2014-0221.html RedHat Security Advisories: RHSA-2014:0249 http://rhn.redhat.com/errata/RHSA-2014-0249.html RedHat Security Advisories: RHSA-2014:0469 http://rhn.redhat.com/errata/RHSA-2014-0469.html http://secunia.com/advisories/61307 SuSE Security Announcement: openSUSE-SU-2014:0345 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html SuSE Security Announcement: openSUSE-SU-2014:0368 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html http://www.ubuntu.com/usn/USN-2120-1