製品・ソフトウェアに関する情報

JVN脆弱性詳細

PostgreSQL における権限を取得される脆弱性

Title	PostgreSQL における権限を取得される脆弱性
Summary	PostgreSQL は、PL/Java 用の不特定のカスタム構成設定 (GUCS) へのアクセスを適切に制限しないため、権限を取得される脆弱性が存在します。
Possible impacts	攻撃者により、権限を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 11, 2016, midnight
Registration Date	March 10, 2016, 4:35 p.m.
Last Update	March 10, 2016, 4:35 p.m.

CVSS2.0 : 危険
Score	9
Vector	AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected System

PostgreSQL.org

PostgreSQL 9.1.20 未満

PostgreSQL 9.2.15 未満の 9.2.x

PostgreSQL 9.3.11 未満の 9.3.x

PostgreSQL 9.4.6 未満の 9.4.x

PostgreSQL 9.5.1 未満の 9.5.x

PostgreSQL 9.1.20 未満

PostgreSQL 9.2.15 未満の 9.2.x

PostgreSQL 9.3.11 未満の 9.3.x

PostgreSQL 9.4.6 未満の 9.4.x

PostgreSQL 9.5.1 未満の 9.5.x

Debian

Debian GNU/Linux 7.0

Debian GNU/Linux 8.0

Debian GNU/Linux 7.0

Debian GNU/Linux 8.0

Canonical

Ubuntu 12.04 LTS

Ubuntu 14.04 LTS

Ubuntu 15.10

Ubuntu 12.04 LTS

Ubuntu 14.04 LTS

Ubuntu 15.10

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-0766	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0766
2	CVE-2016-0766	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0766
National Vulnerability Database (NVD)
3	CVE-2016-0766	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-0766
4	CVE-2016-0766	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-0766

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-264	https://jvndb.jvn.jp/ja/cwe/CWE-264.html
2	CWE-264	https://jvndb.jvn.jp/ja/cwe/CWE-264.html

ベンダー情報

No	Name	URL
Debian Security Advisory
1	DSA-3476	https://www.debian.org/security/2016/dsa-3476
2	DSA-3476	https://www.debian.org/security/2016/dsa-3476
PostgreSQL NEWS
3	2016-02-11 Security Update Release	http://www.postgresql.org/about/news/1644/
4	2016-02-11 Security Update Release	http://www.postgresql.org/about/news/1644/
PostgreSQL Release Notes
5	E.1. Release 9.5.1	http://www.postgresql.org/docs/current/static/release-9-5-1.html
6	E.1. Release 9.5.1	http://www.postgresql.org/docs/current/static/release-9-5-1.html
7	E.10. Release 9.3.11	http://www.postgresql.org/docs/current/static/release-9-3-11.html
8	E.10. Release 9.3.11	http://www.postgresql.org/docs/current/static/release-9-3-11.html
9	E.22. Release 9.2.15	http://www.postgresql.org/docs/current/static/release-9-2-15.html
10	E.22. Release 9.2.15	http://www.postgresql.org/docs/current/static/release-9-2-15.html
11	E.3. Release 9.4.6	http://www.postgresql.org/docs/current/static/release-9-4-6.html
12	E.3. Release 9.4.6	http://www.postgresql.org/docs/current/static/release-9-4-6.html
13	E.38. Release 9.1.20	http://www.postgresql.org/docs/current/static/release-9-1-20.html
14	E.38. Release 9.1.20	http://www.postgresql.org/docs/current/static/release-9-1-20.html
Ubuntu Security Notice
15	USN-2894-1	http://www.ubuntu.com/usn/USN-2894-1/
16	USN-2894-1	http://www.ubuntu.com/usn/USN-2894-1/

Change Log

No	Changed Details	Date of change
0	[2016年03月10日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2016-0766

Summary	PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.
Publication Date	Feb. 18, 2016, 12:59 a.m.
Registration Date	Jan. 26, 2021, 2:04 p.m.
Last Update	Nov. 21, 2024, 11:42 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:postgresql:postgresql:9.5:::::::*
cpe:2.3:a:postgresql:postgresql::::::::	9.2			9.2.15
cpe:2.3:a:postgresql:postgresql::::::::	9.4			9.4.6
cpe:2.3:a:postgresql:postgresql::::::::	9.3			9.3.11
cpe:2.3:a:postgresql:postgresql::::::::	9.1.0			9.1.20

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::
cpe:2.3:o:debian:debian_linux:8.0:::::::*
cpe:2.3:o:debian:debian_linux:7.0:::::::*
cpe:2.3:o:canonical:ubuntu_linux:15.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html	Mailing List Third Party Advisory
2	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html	Mailing List Third Party Advisory
3	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html	Mailing List Third Party Advisory
4	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html	Mailing List Third Party Advisory
5	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html	Mailing List Third Party Advisory
6	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html	Mailing List Third Party Advisory
7	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html	Mailing List Third Party Advisory
8	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html	Mailing List Third Party Advisory
9	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html	Mailing List Third Party Advisory
10	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html	Mailing List Third Party Advisory
11	http://www.debian.org/security/2016/dsa-3475	Third Party Advisory
12	http://www.debian.org/security/2016/dsa-3475	Third Party Advisory
13	http://www.debian.org/security/2016/dsa-3476	Third Party Advisory
14	http://www.debian.org/security/2016/dsa-3476	Third Party Advisory
15	http://www.postgresql.org/about/news/1644/	Vendor Advisory
16	http://www.postgresql.org/about/news/1644/	Vendor Advisory
17	http://www.postgresql.org/docs/current/static/release-9-1-20.html	Vendor Advisory
18	http://www.postgresql.org/docs/current/static/release-9-1-20.html	Vendor Advisory
19	http://www.postgresql.org/docs/current/static/release-9-2-15.html	Vendor Advisory
20	http://www.postgresql.org/docs/current/static/release-9-2-15.html	Vendor Advisory
21	http://www.postgresql.org/docs/current/static/release-9-3-11.html	Vendor Advisory
22	http://www.postgresql.org/docs/current/static/release-9-3-11.html	Vendor Advisory
23	http://www.postgresql.org/docs/current/static/release-9-4-6.html	Vendor Advisory
24	http://www.postgresql.org/docs/current/static/release-9-4-6.html	Vendor Advisory
25	http://www.postgresql.org/docs/current/static/release-9-5-1.html	Vendor Advisory
26	http://www.postgresql.org/docs/current/static/release-9-5-1.html	Vendor Advisory
27	http://www.securityfocus.com/bid/83184	Third Party Advisory VDB Entry
28	http://www.securityfocus.com/bid/83184	Third Party Advisory VDB Entry
29	http://www.securitytracker.com/id/1035005	Third Party Advisory VDB Entry
30	http://www.securitytracker.com/id/1035005	Third Party Advisory VDB Entry
31	http://www.ubuntu.com/usn/USN-2894-1	Third Party Advisory
32	http://www.ubuntu.com/usn/USN-2894-1	Third Party Advisory
33	https://security.gentoo.org/glsa/201701-33	Third Party Advisory
34	https://security.gentoo.org/glsa/201701-33	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-264	認可・権限・アクセス制御	https://cwe.mitre.org/data/definitions/264.html