关键漏洞信息 漏洞ID: CVE-2007-2138 漏洞名称: PostgreSQL search_path vulnerability CVE评分: - CVSS 1.0 Base Score: 6.0 - Access Vector: Remote - Access Complexity: Low - Authentication: Required - Confidentiality Impact: Complete - Integrity Impact: Complete - Availability Impact: Complete - CVSS 1.0 Temporal Score: 4.4 - Exploitability: Unproven - Remediation Level: Official Fix - Report Confidence: Confirmed 后果: Gain Privileges 补救措施: - 查看 PostgreSQL 新闻 2007-04-23 for upgrade information. - 对于不同操作系统和发行版有特定的补丁、升级及建议的操作，如: - Mandriva Linux (postgresql): MDKSA-2007:094 - Ubuntu Linux: USN-454-1 - Gentoo Linux (postgresql): GLSA 200705-12 - Solaris: Sun Alert ID: 102894 - Red Hat Linux: RHSA-2007:0336 - Debian GNU/Linux (postgresql-8.1): DSA-1309-1 - Debian/GNU Linux: DSA-1311-1 影响的产品: - PostgreSQL 7.3 - PostgreSQL 7.4.3 - PostgreSQL 8.0 - PostgreSQL 8.1 相关链接: - PostgreSQL News, 2007-04-23 - PostgreSQL Web site - Sun Alert ID: 102894 - SA25019