CVE-2009-3230
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8...
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.
Exploit likelihood
What each source reports
NVD Score used
6.5
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.
- Record
CVE-2009-3230- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.
- Record
CVE-2009-3230- Updated
- 2026-11-02
EUVDEUVD-2009-3213 No score
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.
- Record
EUVD-2009-3213- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cjf3-jm6v-3h96 No score
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8...
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.
- Record
GHSA-cjf3-jm6v-3h96- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresql-7.4Debian:4.0 From an advisory covering 3 CVEs |
before 1:7.4.26-0etch1, plus listed versions 1:7.4.16-11:7.4.17-0etch11:7.4.17-11:7.4.19-0etch11:7.4.23-0etch1 |
1:7.4.26-0etch1 |
postgresql-8.1Debian:4.0 From an advisory covering 3 CVEs |
before 8.1.18-0etch1, plus listed versions 8.1.10-0etch18.1.10-18.1.11-0etch18.1.11-18.1.13-0etch1 Show 7 moreShow less8.1.15-0etch18.1.17-0etch18.1.8-18.1.8-28.1.9-0etch18.1.9-0etch28.1.9-1 |
8.1.18-0etch1 |
postgresql-8.3Debian:5.0 From an advisory covering 3 CVEs |
before 8.3.8-0lenny1, plus listed versions 8.3.5-18.3.5-28.3.6-18.3.6-1~bpo40+18.3.7-0lenny1 Show 7 moreShow less8.3.7-0lenny1~bpo40+18.3.7-18.3.7-28.3.7-38.3.7-48.3.8-0lenny1~bpo40+18.3.8-0lenny1~bpo40+2 |
8.3.8-0lenny1 |
httpdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 1:2.2.13-2.el5s2 | 1:2.2.13-2.el5s2 |
mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
Show 166 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-clusterRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
phpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-cliRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-commonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-gdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-imapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pearRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 1:1.8.1-2.el5s2 | 1:1.8.1-2.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-soapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-jdbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-jdbc-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresqlRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.4.26-1.el4_8.1 | 0:7.4.26-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-plRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-testRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresqlRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-contribRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-docsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-libsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-pythonRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-tclRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresqlRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-contribRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-docsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-libsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-plRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-pythonRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-serverRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-tclRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
postgresql-testRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.1.18-2.el5_4.1 | 0:8.1.18-2.el5_4.1 |
rh-postgresqlRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::as |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresqlRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::es |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresqlRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-2 | 0:7.3.21-2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3230 is a medium vulnerability (CVSS 6.5) in Postgresql, published September 17, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.83%, the 86th percentile. Fixed in rh-postgresql 0:7.3.21-2.
References
vupen.com/english/advisories/2009/2602
redhat.com/archives/fedora-package-announce/2009-September/msg00307.html
postgresql.org/docs/8.3/static/release-8-3-8.html
securityfocus.com/bid/36314
marc.info?l=bugtraq&m=134124585221119&w=2
secunia.com/advisories/36837
Show 60 moreShow less
archives.postgresql.org/pgsql-www/2009-09/msg00024.php
postgresql.org/support/security.html
bugzilla.redhat.com/show_bug.cgi?id=522085
secunia.com/advisories/36660
securityfocus.com/archive/1/509917/100/0/threaded
secunia.com/advisories/36800
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10166
us.debian.org/security/2009/dsa-1900
redhat.com/archives/fedora-package-announce/2009-September/msg00305.html
lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1
secunia.com/advisories/36727
lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
ubuntu.com/usn/usn-834-1
wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
secunia.com/advisories/36695
nvd.nist.gov/vuln/detail/CVE-2009-3230
github.com/advisories/GHSA-cjf3-jm6v-3h96
access.redhat.com/errata/RHSA-2009:1461
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=466518
bugzilla.redhat.com/show_bug.cgi?id=506896
bugzilla.redhat.com/show_bug.cgi?id=511020
bugzilla.redhat.com/show_bug.cgi?id=521619
bugzilla.redhat.com/show_bug.cgi?id=522084
bugzilla.redhat.com/show_bug.cgi?id=522092
bugzilla.redhat.com/show_bug.cgi?id=522209
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1461.json
access.redhat.com/security/cve/CVE-2008-4456
cve.org/CVERecord?id=CVE-2008-4456
nvd.nist.gov/vuln/detail/CVE-2008-4456
access.redhat.com/security/cve/CVE-2009-2446
cve.org/CVERecord?id=CVE-2009-2446
nvd.nist.gov/vuln/detail/CVE-2009-2446
access.redhat.com/security/cve/CVE-2009-2687
cve.org/CVERecord?id=CVE-2009-2687
nvd.nist.gov/vuln/detail/CVE-2009-2687
access.redhat.com/security/cve/CVE-2009-3094
cve.org/CVERecord?id=CVE-2009-3094
nvd.nist.gov/vuln/detail/CVE-2009-3094
access.redhat.com/security/cve/CVE-2009-3095
cve.org/CVERecord?id=CVE-2009-3095
nvd.nist.gov/vuln/detail/CVE-2009-3095
access.redhat.com/security/cve/CVE-2009-3229
cve.org/CVERecord?id=CVE-2009-3229
nvd.nist.gov/vuln/detail/CVE-2009-3229
access.redhat.com/security/cve/CVE-2009-3230
cve.org/CVERecord?id=CVE-2009-3230
access.redhat.com/security/cve/CVE-2009-3231
cve.org/CVERecord?id=CVE-2009-3231
nvd.nist.gov/vuln/detail/CVE-2009-3231
access.redhat.com/errata/RHSA-2009:1484
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=488156
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1484.json
access.redhat.com/security/cve/CVE-2009-0922
cve.org/CVERecord?id=CVE-2009-0922
nvd.nist.gov/vuln/detail/CVE-2009-0922
access.redhat.com/errata/RHSA-2009:1485
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1485.json