postgresql Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/postgresql/ Sun, 26 Feb 2023 06:29:06 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png postgresql Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/postgresql/ 32 32 CVE-2019-10210 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10210/ Sun, 26 Feb 2023 06:29:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10210/ Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file.

The post CVE-2019-10210 appeared first on CVE Vulnerability.

]]> Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file.

The post CVE-2019-10210 appeared first on CVE Vulnerability.

]]> CVE-2019-10211 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10211/ Sun, 26 Feb 2023 06:29:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10211/ Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory.

The post CVE-2019-10211 appeared first on CVE Vulnerability.

]]> Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory.

The post CVE-2019-10211 appeared first on CVE Vulnerability.

]]> CVE-2019-10127 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10127/ Sun, 26 Feb 2023 06:29:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10127/ A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps the inherited ACL. In the default configuration, an attacker having both an unprivileged Windows account and an unprivileged […]

The post CVE-2019-10127 appeared first on CVE Vulnerability.

]]> A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps the inherited ACL. In the default configuration, an attacker having both an unprivileged Windows account and an unprivileged PostgreSQL account can cause the PostgreSQL service account to execute arbitrary code. An attacker having only the unprivileged Windows account can read arbitrary data directory files, essentially bypassing database-imposed read access limitations. An attacker having only the unprivileged Windows account can also delete certain data directory files.

The post CVE-2019-10127 appeared first on CVE Vulnerability.

]]> CVE-2019-10128 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10128/ Sun, 26 Feb 2023 06:29:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10128/ A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps the inherited ACL. In the default configuration, this allows a local attacker to read arbitrary data directory files, […]

The post CVE-2019-10128 appeared first on CVE Vulnerability.

]]> A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps the inherited ACL. In the default configuration, this allows a local attacker to read arbitrary data directory files, essentially bypassing database-imposed read access limitations. In plausible non-default configurations, an attacker having both an unprivileged Windows account and an unprivileged PostgreSQL account can cause the PostgreSQL service account to execute arbitrary code.

The post CVE-2019-10128 appeared first on CVE Vulnerability.

]]>