Test ID:	1.3.6.1.4.1.25623.1.0.804711
Category:	Databases
Title:	PostgreSQL 'make check' Local Privilege Escalation Vulnerability (Jul 2014) - Windows
Summary:	PostgreSQL is prone to a local privilege escalation vulnerability.
Description:	Summary: PostgreSQL is prone to a local privilege escalation vulnerability. Vulnerability Insight: Flaw is due to an error when creating a PostgreSQL database cluster during 'make check'. Vulnerability Impact: Successful exploitation may allow local attacker to gain temporary server access and elevated privileges. Affected Software/OS: PostgreSQL version 9.3.3 and earlier Solution: Update to version 9.3.6, 9.4.1 or later. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0067 65721 http://www.securityfocus.com/bid/65721 APPLE-SA-2015-08-13-2 http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html APPLE-SA-2015-09-16-4 http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html DSA-2864 http://www.debian.org/security/2014/dsa-2864 DSA-2865 http://www.debian.org/security/2014/dsa-2865 http://wiki.postgresql.org/wiki/20140220securityrelease http://www.postgresql.org/about/news/1506/ https://support.apple.com/HT205219 https://support.apple.com/kb/HT205031 openSUSE-SU-2014:0345 http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html openSUSE-SU-2014:0368 http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.