OpenBSD VuXML: Documenting security issues in the OpenBSD Ports & Packages Collection

postgresql -- privilege escalation via LOAD

Affected packages
postgresql-server < 7.4.3p1

Details

VuXML ID ba5cd8e4-7788-11d9-bdc2-080020f8e4df
Discovery 2005-01-21
Entry 2005-02-05

Low privileged users can invoke the LOAD extension to load arbitrary libraries into the postgres process space.

References

URL http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php