• info
• discussion
• exploit
• solution
• references

PostgreSQL Character Set Conversion Privilege Escalation Vulnerability

Solution:
Please see the referenced vendor advisories for details on obtaining and applying fixes.


PostgreSQL PostgreSQL 7.3.2

• RedHat postgresql-7.3.10-0.90.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/postgresql-7.3. 10-0.90.1.legacy.i386.rpm


• RedHat postgresql-contrib-7.3.10-0.90.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/postgresql-cont rib-7.3.10-0.90.1.legacy.i386.rpm


• RedHat postgresql-devel-7.3.10-0.90.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/postgresql-deve l-7.3.10-0.90.1.legacy.i386.rpm


• RedHat postgresql-docs-7.3.10-0.90.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/postgresql-docs -7.3.10-0.90.1.legacy.i386.rpm


• RedHat postgresql-jdbc-7.3.10-0.90.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/postgresql-jdbc -7.3.10-0.90.1.legacy.i386.rpm


• RedHat postgresql-libs-7.3.10-0.90.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/postgresql-libs -7.3.10-0.90.1.legacy.i386.rpm


• RedHat postgresql-pl-7.3.10-0.90.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/postgresql-pl-7 .3.10-0.90.1.legacy.i386.rpm


• RedHat postgresql-python-7.3.10-0.90.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/postgresql-pyth on-7.3.10-0.90.1.legacy.i386.rpm


• RedHat postgresql-server-7.3.10-0.90.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/postgresql-serv er-7.3.10-0.90.1.legacy.i386.rpm


• RedHat postgresql-tcl-7.3.10-0.90.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/postgresql-tcl- 7.3.10-0.90.1.legacy.i386.rpm


• RedHat postgresql-test-7.3.10-0.90.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/postgresql-test -7.3.10-0.90.1.legacy.i386.rpm

PostgreSQL PostgreSQL 7.3.4

• RedHat postgresql-7.3.10-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/postgresql-7.3. 10-1.1.legacy.i386.rpm


• RedHat postgresql-contrib-7.3.10-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/postgresql-cont rib-7.3.10-1.1.legacy.i386.rpm


• RedHat postgresql-devel-7.3.10-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/postgresql-deve l-7.3.10-1.1.legacy.i386.rpm


• RedHat postgresql-docs-7.3.10-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/postgresql-docs -7.3.10-1.1.legacy.i386.rpm


• RedHat postgresql-jdbc-7.3.10-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/postgresql-jdbc -7.3.10-1.1.legacy.i386.rpm


• RedHat postgresql-libs-7.3.10-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/postgresql-libs -7.3.10-1.1.legacy.i386.rpm


• RedHat postgresql-pl-7.3.10-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/postgresql-pl-7 .3.10-1.1.legacy.i386.rpm


• RedHat postgresql-python-7.3.10-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/postgresql-pyth on-7.3.10-1.1.legacy.i386.rpm


• RedHat postgresql-server-7.3.10-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/postgresql-serv er-7.3.10-1.1.legacy.i386.rpm


• RedHat postgresql-tcl-7.3.10-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/postgresql-tcl- 7.3.10-1.1.legacy.i386.rpm


• RedHat postgresql-test-7.3.10-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/postgresql-test -7.3.10-1.1.legacy.i386.rpm

PostgreSQL PostgreSQL 7.4.5

• Ubuntu libecpg-dev_7.4.5-3ubuntu0.5_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg-dev_7 .4.5-3ubuntu0.5_amd64.deb


• Ubuntu libecpg-dev_7.4.5-3ubuntu0.5_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg-dev_7 .4.5-3ubuntu0.5_i386.deb


• Ubuntu libecpg-dev_7.4.5-3ubuntu0.5_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg-dev_7 .4.5-3ubuntu0.5_powerpc.deb


• Ubuntu libecpg4_7.4.5-3ubuntu0.5_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg4_7.4. 5-3ubuntu0.5_amd64.deb-dev_7.4.5-3ubuntu0.5_amd64.deb


• Ubuntu libecpg4_7.4.5-3ubuntu0.5_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg4_7.4. 5-3ubuntu0.5_i386.deb


• Ubuntu libecpg4_7.4.5-3ubuntu0.5_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg4_7.4. 5-3ubuntu0.5_powerpc.deb


• Ubuntu libpgtcl-dev_7.4.5-3ubuntu0.5_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl-dev_ 7.4.5-3ubuntu0.5_amd64.deb


• Ubuntu libpgtcl-dev_7.4.5-3ubuntu0.5_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl-dev_ 7.4.5-3ubuntu0.5_i386.deb


• Ubuntu libpgtcl-dev_7.4.5-3ubuntu0.5_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl-dev_ 7.4.5-3ubuntu0.5_powerpc.deb


• Ubuntu libpgtcl_7.4.5-3ubuntu0.5_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl_7.4. 5-3ubuntu0.5_amd64.deb


• Ubuntu libpgtcl_7.4.5-3ubuntu0.5_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl_7.4. 5-3ubuntu0.5_i386.deb


• Ubuntu libpgtcl_7.4.5-3ubuntu0.5_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl_7.4. 5-3ubuntu0.5_powerpc.deb


• Ubuntu libpq3_7.4.5-3ubuntu0.5_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpq3_7.4.5- 3ubuntu0.5_amd64.deb


• Ubuntu libpq3_7.4.5-3ubuntu0.5_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpq3_7.4.5- 3ubuntu0.5_i386.deb


• Ubuntu libpq3_7.4.5-3ubuntu0.5_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpq3_7.4.5- 3ubuntu0.5_powerpc.deb


• Ubuntu postgresql-client_7.4.5-3ubuntu0.5_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-cl ient_7.4.5-3ubuntu0.5_amd64.deb


• Ubuntu postgresql-client_7.4.5-3ubuntu0.5_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-cl ient_7.4.5-3ubuntu0.5_i386.deb


• Ubuntu postgresql-client_7.4.5-3ubuntu0.5_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-cl ient_7.4.5-3ubuntu0.5_powerpc.deb


• Ubuntu postgresql-contrib_7.4.5-3ubuntu0.5_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/p/postgresql/postgresq l-contrib_7.4.5-3ubuntu0.5_amd64.deb


• Ubuntu postgresql-contrib_7.4.5-3ubuntu0.5_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/p/postgresql/postgresq l-contrib_7.4.5-3ubuntu0.5_i386.deb


• Ubuntu postgresql-contrib_7.4.5-3ubuntu0.5_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/p/postgresql/postgresq l-contrib_7.4.5-3ubuntu0.5_powerpc.deb


• Ubuntu postgresql-dev_7.4.5-3ubuntu0.5_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-de v_7.4.5-3ubuntu0.5_amd64.deb


• Ubuntu postgresql-dev_7.4.5-3ubuntu0.5_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-de v_7.4.5-3ubuntu0.5_i386.deb


• Ubuntu postgresql-dev_7.4.5-3ubuntu0.5_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-de v_7.4.5-3ubuntu0.5_powerpc.deb


• Ubuntu postgresql-doc_7.4.5-3ubuntu0.5_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-do c_7.4.5-3ubuntu0.5_all.deb


• Ubuntu postgresql_7.4.5-3ubuntu0.5_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql_7. 4.5-3ubuntu0.5_amd64.deb


• Ubuntu postgresql_7.4.5-3ubuntu0.5_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql_7. 4.5-3ubuntu0.5_i386.deb


• Ubuntu postgresql_7.4.5-3ubuntu0.5_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql_7. 4.5-3ubuntu0.5_powerpc.deb

PostgreSQL PostgreSQL 7.4.7

• Ubuntu libecpg-dev_7.4.7-2ubuntu2.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg-dev_7 .4.7-2ubuntu2.1_amd64.deb


• Ubuntu libecpg-dev_7.4.7-2ubuntu2.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg-dev_7 .4.7-2ubuntu2.1_i386.deb


• Ubuntu libecpg-dev_7.4.7-2ubuntu2.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg-dev_7 .4.7-2ubuntu2.1_powerpc.deb


• Ubuntu libecpg4_7.4.7-2ubuntu2.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg4_7.4. 7-2ubuntu2.1_amd64.deb


• Ubuntu libecpg4_7.4.7-2ubuntu2.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg4_7.4. 7-2ubuntu2.1_i386.deb


• Ubuntu libecpg4_7.4.7-2ubuntu2.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libecpg4_7.4. 7-2ubuntu2.1_powerpc.deb


• Ubuntu libpgtcl-dev_7.4.7-2ubuntu2.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl-dev_ 7.4.7-2ubuntu2.1_amd64.deb


• Ubuntu libpgtcl-dev_7.4.7-2ubuntu2.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl-dev_ 7.4.7-2ubuntu2.1_i386.deb


• Ubuntu libpgtcl-dev_7.4.7-2ubuntu2.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl-dev_ 7.4.7-2ubuntu2.1_powerpc.deb


• Ubuntu libpgtcl_7.4.7-2ubuntu2.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl_7.4. 7-2ubuntu2.1_amd64.deb


• Ubuntu libpgtcl_7.4.7-2ubuntu2.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl_7.4. 7-2ubuntu2.1_i386.deb


• Ubuntu libpgtcl_7.4.7-2ubuntu2.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpgtcl_7.4. 7-2ubuntu2.1_powerpc.deb


• Ubuntu libpq3_7.4.7-2ubuntu2.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpq3_7.4.7- 2ubuntu2.1_amd64.deb


• Ubuntu libpq3_7.4.7-2ubuntu2.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpq3_7.4.7- 2ubuntu2.1_i386.deb


• Ubuntu libpq3_7.4.7-2ubuntu2.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/libpq3_7.4.7- 2ubuntu2.1_powerpc.deb


• Ubuntu postgresql-client_7.4.7-2ubuntu2.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-cl ient_7.4.7-2ubuntu2.1_amd64.deb


• Ubuntu postgresql-client_7.4.7-2ubuntu2.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-cl ient_7.4.7-2ubuntu2.1_i386.deb


• Ubuntu postgresql-client_7.4.7-2ubuntu2.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-cl ient_7.4.7-2ubuntu2.1_powerpc.deb


• Ubuntu postgresql-contrib_7.4.7-2ubuntu2.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/universe/p/postgresql/postgresq l-contrib_7.4.7-2ubuntu2.1_amd64.deb


• Ubuntu postgresql-contrib_7.4.7-2ubuntu2.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/universe/p/postgresql/postgresq l-contrib_7.4.7-2ubuntu2.1_i386.deb


• Ubuntu postgresql-contrib_7.4.7-2ubuntu2.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/universe/p/postgresql/postgresq l-contrib_7.4.7-2ubuntu2.1_powerpc.deb


• Ubuntu postgresql-dev_7.4.7-2ubuntu2.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-de v_7.4.7-2ubuntu2.1_amd64.deb


• Ubuntu postgresql-dev_7.4.7-2ubuntu2.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-de v_7.4.7-2ubuntu2.1_i386.deb


• Ubuntu postgresql-dev_7.4.7-2ubuntu2.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-de v_7.4.7-2ubuntu2.1_powerpc.deb


• Ubuntu postgresql-doc_7.4.7-2ubuntu2.1_all.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql-do c_7.4.7-2ubuntu2.1_all.deb


• Ubuntu postgresql_7.4.7-2ubuntu2.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql_7. 4.7-2ubuntu2.1_amd64.deb


• Ubuntu postgresql_7.4.7-2ubuntu2.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql_7. 4.7-2ubuntu2.1_i386.deb


• Ubuntu postgresql_7.4.7-2ubuntu2.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog):
  http://security.ubuntu.com/ubuntu/pool/main/p/postgresql/postgresql_7. 4.7-2ubuntu2.1_powerpc.deb