vendor:
PostgreSQL
by:
SecurityFocus
7.5
CVSS
HIGH
Information Disclosure
200
CWE
Product Name: PostgreSQL
Affected Version From: 8.3.2006
Affected Version To: 8.3.2006
Patch Exists: YES
Related CWE: N/A
CPE: postgresql
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
PostgreSQL Information Disclosure Vulnerability
PostgreSQL is prone to an information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. An attacker can exploit this vulnerability by creating a malicious function and using it to access restricted data. An example of such a function is provided in the text.
Mitigation:
Restrict access to the database and ensure that only trusted users can access it.