CVE-2012-0866: postgresql
Vulnerability summary
CVE-2012-0866 is a medium (CVSS 6.5) vulnerability in postgresql. EPSS estimates a 3.62% chance of exploitation in the next 30 days, higher than 89.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 6 · Related 3Timeline
- 18-07-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.62%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.62% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Postgresql1 product
- postgresqlEOL8.3 | 8.3.1 | 8.3.2 | 8.3.3 | 8.3.4 | 8.3.5 | 8.3.6 | 8.3.7 | 8.3.8 | 8.3.9 | 8.3.10 | 8.3.11 | 8.3.12 | 8.3.13 | 8.3.14 | 8.3.15 | 8.3.16 | 8.3.17 | 8.4 | 8.4.1 | 8.4.2 | 8.4.3 | 8.4.4 | 8.4.5 | 8.4.6 | 8.4.7 | 8.4.8 | 8.4.9 | 8.4.10 | 9.0 | 9.0.1 | 9.0.2 | 9.0.3 | 9.0.4 | 9.0.5 | 9.0.6 | 9.1 | 9.1.1 | 9.1.2
1 vendor · 1 product
References
15 links- www.postgresql.org/docs/9.0/static/release-9-0-7.htmlX Refsource CONFIRM
- kb.juniper.net/InfoCenter/index?page=content&id=JSA10705X Refsource CONFIRM
- www.postgresql.org/docs/8.4/static/release-8-4-11.htmlX Refsource CONFIRM
Show all 15 references
- www.postgresql.org/docs/8.3/static/release-8-3-18.htmlX Refsource CONFIRM
- www.postgresql.org/docs/9.1/static/release-9-1-3.htmlX Refsource CONFIRM