Fix bug that allowed any logged-in user to SET ROLE to any other database user
id (CVE-2006-0553). Also fix related bug in SET SESSION AUTHORIZATION that allows unprivileged users to crash the server, if it has been compiled with Asserts enabled. The escalation-of-privilege risk exists only in 8.1.0-8.1.2. However, the Assert-crash risk exists in all releases back to 7.3. Thanks to Akio Ishida for reporting this problem.
Showing
- src/backend/commands/variable.c 4 additions, 2 deletionssrc/backend/commands/variable.c
- src/backend/utils/mb/encnames.c 2 additions, 2 deletionssrc/backend/utils/mb/encnames.c
- src/backend/utils/misc/guc.c 14 additions, 6 deletionssrc/backend/utils/misc/guc.c
- src/include/utils/guc_tables.h 2 additions, 1 deletionsrc/include/utils/guc_tables.h
Loading
Please register or sign in to comment