// For flags

CVE-2009-4136

postgresql: SQL privilege escalation via modifications to session-local state

Severity Score

8.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.

PostgreSQL v7.4.x anteriores a v7.4.27, v8.0.x anteriores a v8.0.23, v8.1.x anteriores a v8.1.19, v8.2.x anteriores a v8.2.15, v8.3.x anteriores a v8.3.9, y v8.4.x anteriores a v8.4.2 no gestiona adecuadamente el estado de la sesión local durante la ejecución de una función de indexado por parte de un superusuario de base de datos, lo que permite a usuarios remotos autenticados conseguir ganar privilegios a través de una tabla con las funcione de indexado manipuladas, como se demuestra en las funciones (1) search_path o (2) una declaración, un asunto relacionado con CVE-2007-6600 y CVE-2009-3230.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
Attack Vector
Adjacent
Attack Complexity
High
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-12-01 CVE Reserved
  • 2009-12-15 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (27)
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.1
Search vendor "Postgresql" for product "Postgresql" and version "7.4.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.2
Search vendor "Postgresql" for product "Postgresql" and version "7.4.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.3
Search vendor "Postgresql" for product "Postgresql" and version "7.4.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.4
Search vendor "Postgresql" for product "Postgresql" and version "7.4.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.5
Search vendor "Postgresql" for product "Postgresql" and version "7.4.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.6
Search vendor "Postgresql" for product "Postgresql" and version "7.4.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.7
Search vendor "Postgresql" for product "Postgresql" and version "7.4.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.8
Search vendor "Postgresql" for product "Postgresql" and version "7.4.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.9
Search vendor "Postgresql" for product "Postgresql" and version "7.4.9"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.10
Search vendor "Postgresql" for product "Postgresql" and version "7.4.10"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.11
Search vendor "Postgresql" for product "Postgresql" and version "7.4.11"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.12
Search vendor "Postgresql" for product "Postgresql" and version "7.4.12"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.13
Search vendor "Postgresql" for product "Postgresql" and version "7.4.13"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.14
Search vendor "Postgresql" for product "Postgresql" and version "7.4.14"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.15
Search vendor "Postgresql" for product "Postgresql" and version "7.4.15"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.16
Search vendor "Postgresql" for product "Postgresql" and version "7.4.16"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.17
Search vendor "Postgresql" for product "Postgresql" and version "7.4.17"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.18
Search vendor "Postgresql" for product "Postgresql" and version "7.4.18"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.19
Search vendor "Postgresql" for product "Postgresql" and version "7.4.19"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.20
Search vendor "Postgresql" for product "Postgresql" and version "7.4.20"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.21
Search vendor "Postgresql" for product "Postgresql" and version "7.4.21"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.22
Search vendor "Postgresql" for product "Postgresql" and version "7.4.22"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.23
Search vendor "Postgresql" for product "Postgresql" and version "7.4.23"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.24
Search vendor "Postgresql" for product "Postgresql" and version "7.4.24"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.25
Search vendor "Postgresql" for product "Postgresql" and version "7.4.25"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.26
Search vendor "Postgresql" for product "Postgresql" and version "7.4.26"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.0
Search vendor "Postgresql" for product "Postgresql" and version "8.0.0"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.1
Search vendor "Postgresql" for product "Postgresql" and version "8.0.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.2
Search vendor "Postgresql" for product "Postgresql" and version "8.0.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.3
Search vendor "Postgresql" for product "Postgresql" and version "8.0.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.4
Search vendor "Postgresql" for product "Postgresql" and version "8.0.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.5
Search vendor "Postgresql" for product "Postgresql" and version "8.0.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.6
Search vendor "Postgresql" for product "Postgresql" and version "8.0.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.7
Search vendor "Postgresql" for product "Postgresql" and version "8.0.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.8
Search vendor "Postgresql" for product "Postgresql" and version "8.0.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.9
Search vendor "Postgresql" for product "Postgresql" and version "8.0.9"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.10
Search vendor "Postgresql" for product "Postgresql" and version "8.0.10"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.11
Search vendor "Postgresql" for product "Postgresql" and version "8.0.11"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.12
Search vendor "Postgresql" for product "Postgresql" and version "8.0.12"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.13
Search vendor "Postgresql" for product "Postgresql" and version "8.0.13"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.14
Search vendor "Postgresql" for product "Postgresql" and version "8.0.14"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.15
Search vendor "Postgresql" for product "Postgresql" and version "8.0.15"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.16
Search vendor "Postgresql" for product "Postgresql" and version "8.0.16"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.17
Search vendor "Postgresql" for product "Postgresql" and version "8.0.17"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.18
Search vendor "Postgresql" for product "Postgresql" and version "8.0.18"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.19
Search vendor "Postgresql" for product "Postgresql" and version "8.0.19"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.20
Search vendor "Postgresql" for product "Postgresql" and version "8.0.20"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.21
Search vendor "Postgresql" for product "Postgresql" and version "8.0.21"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.22
Search vendor "Postgresql" for product "Postgresql" and version "8.0.22"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.0
Search vendor "Postgresql" for product "Postgresql" and version "8.1.0"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.1
Search vendor "Postgresql" for product "Postgresql" and version "8.1.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.2
Search vendor "Postgresql" for product "Postgresql" and version "8.1.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.3
Search vendor "Postgresql" for product "Postgresql" and version "8.1.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.4
Search vendor "Postgresql" for product "Postgresql" and version "8.1.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.5
Search vendor "Postgresql" for product "Postgresql" and version "8.1.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.6
Search vendor "Postgresql" for product "Postgresql" and version "8.1.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.7
Search vendor "Postgresql" for product "Postgresql" and version "8.1.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.8
Search vendor "Postgresql" for product "Postgresql" and version "8.1.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.9
Search vendor "Postgresql" for product "Postgresql" and version "8.1.9"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.10
Search vendor "Postgresql" for product "Postgresql" and version "8.1.10"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.11
Search vendor "Postgresql" for product "Postgresql" and version "8.1.11"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.12
Search vendor "Postgresql" for product "Postgresql" and version "8.1.12"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.13
Search vendor "Postgresql" for product "Postgresql" and version "8.1.13"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.14
Search vendor "Postgresql" for product "Postgresql" and version "8.1.14"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.15
Search vendor "Postgresql" for product "Postgresql" and version "8.1.15"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.16
Search vendor "Postgresql" for product "Postgresql" and version "8.1.16"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.17
Search vendor "Postgresql" for product "Postgresql" and version "8.1.17"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.18
Search vendor "Postgresql" for product "Postgresql" and version "8.1.18"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2
Search vendor "Postgresql" for product "Postgresql" and version "8.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.1
Search vendor "Postgresql" for product "Postgresql" and version "8.2.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.2
Search vendor "Postgresql" for product "Postgresql" and version "8.2.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.3
Search vendor "Postgresql" for product "Postgresql" and version "8.2.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.4
Search vendor "Postgresql" for product "Postgresql" and version "8.2.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.5
Search vendor "Postgresql" for product "Postgresql" and version "8.2.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.6
Search vendor "Postgresql" for product "Postgresql" and version "8.2.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.7
Search vendor "Postgresql" for product "Postgresql" and version "8.2.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.8
Search vendor "Postgresql" for product "Postgresql" and version "8.2.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.9
Search vendor "Postgresql" for product "Postgresql" and version "8.2.9"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.10
Search vendor "Postgresql" for product "Postgresql" and version "8.2.10"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.11
Search vendor "Postgresql" for product "Postgresql" and version "8.2.11"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.12
Search vendor "Postgresql" for product "Postgresql" and version "8.2.12"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.13
Search vendor "Postgresql" for product "Postgresql" and version "8.2.13"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.14
Search vendor "Postgresql" for product "Postgresql" and version "8.2.14"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.1
Search vendor "Postgresql" for product "Postgresql" and version "8.3.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.2
Search vendor "Postgresql" for product "Postgresql" and version "8.3.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.3
Search vendor "Postgresql" for product "Postgresql" and version "8.3.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.4
Search vendor "Postgresql" for product "Postgresql" and version "8.3.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.5
Search vendor "Postgresql" for product "Postgresql" and version "8.3.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.6
Search vendor "Postgresql" for product "Postgresql" and version "8.3.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.7
Search vendor "Postgresql" for product "Postgresql" and version "8.3.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.8
Search vendor "Postgresql" for product "Postgresql" and version "8.3.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.1
Search vendor "Postgresql" for product "Postgresql" and version "8.4.1"
-
Affected