CVE-2012-0866

CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute…

published July 18, 2012

CVSS
—
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03625 · 89.4th percentile
Published
2012-07-18T23:00Z
EPSS history
Timeline
  • 18 JUL 23:00Z
    CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute…
    cvelistv5