[ GLSA 200502-08 ] PostgreSQL: Local privilege escalation

[Luke Macken <lewk () gentoo org>]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory                           GLSA 200502-08
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                                            http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

  Severity: Normal
     Title: PostgreSQL: Local privilege escalation
      Date: February 07, 2005
      Bugs: #80342
        ID: 200502-08

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

The PostgreSQL server can be tricked by a local attacker to execute
arbitrary code.

Background
==========

PostgreSQL is a SQL compliant, open source object-relational database
management system.

Affected packages
=================

    -------------------------------------------------------------------
     Package            /  Vulnerable  /                    Unaffected
    -------------------------------------------------------------------
  1  dev-db/postgresql       < 7.4.7                          >= 7.4.7

Description
===========

PostgreSQL's LOAD extension is vulnerable to a local privilege
escalation discovered by John Heasman. A local user can load any shared
library, but the initialization function will then be executed with the
permissions of the PostgreSQL server.

Impact
======

A malicious local user could exploit this to execute arbitrary code
with the privileges of the PostgreSQL server.

Workaround
==========

There is no know workaround at this time.

Resolution
==========

All PostgreSQL users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=dev-db/postgresql-7.4.7"

References
==========

  [ 1 ] PostgreSQL Announcement
        http://archives.postgresql.org/pgsql-announce/2005-02/msg00000.php

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

  http://security.gentoo.org/glsa/glsa-200502-08.xml

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security () gentoo org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.0

Attachment: _bin
Description: