CVE ID:	CVE-2013-1901
Description:	PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions.
Test IDs:	1.3.6.1.4.1.25623.1.0.803475   1.3.6.1.4.1.25623.1.0.892658   1.3.6.1.4.1.25623.1.0.892657   1.3.6.1.4.1.25623.1.0.702657   1.3.6.1.4.1.25623.1.0.702658   1.3.6.1.4.1.25623.1.1.4.2013.0633.2   1.3.6.1.4.1.25623.1.1.4.2013.0633.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1901 http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html Debian Security Information: DSA-2658 (Google Search) http://www.debian.org/security/2013/dsa-2658 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:142 SuSE Security Announcement: SUSE-SU-2013:0633 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html SuSE Security Announcement: openSUSE-SU-2013:0627 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html SuSE Security Announcement: openSUSE-SU-2013:0628 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html SuSE Security Announcement: openSUSE-SU-2013:0635 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html http://www.ubuntu.com/usn/USN-1789-1