CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Permissions Privileges and Access Controls
Summary: postgresql 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check replication privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions. per http://www.ubuntu.com/usn/usn-1789-1/
"a security issue affects these releases of ubuntu and its derivatives:

ubuntu 12.10
ubuntu 12.04 lts
ubuntu 11.10
ubuntu 10.04 lts
ubuntu 8.04 lts"
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2013-04-04
Last Modified Date: 2013-12-01
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Permissions Privileges and Access Controls.
user
CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Permissions Privileges and Access Controls
Summary: postgresql 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check replication privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions. per http://www.ubuntu.com/usn/usn-1789-1/
"a security issue affects these releases of ubuntu and its derivatives:

ubuntu 12.10
ubuntu 12.04 lts
ubuntu 11.10
ubuntu 10.04 lts
ubuntu 8.04 lts"
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2013-04-04
Last Modified Date: 2013-12-01
assistant