← Database

CVE-2010-1975

MEDIUM CVSS: 5.5 Published: 2010-05-19 Modified: 2026-06-16

Description

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement.

Affected Platforms

Postgresql Postgresql

Weakness Type

CWE-264

References