diff options
| author | Tom Lane <tgl@sss.pgh.pa.us> | 2013-04-01 13:09:35 -0400 |
|---|---|---|
| committer | Tom Lane <tgl@sss.pgh.pa.us> | 2013-04-01 13:09:35 -0400 |
| commit | b403f4107ba74bcf29499ba3e77e0eae70e62679 (patch) | |
| tree | 536f6e02b5e580c4907beef9f4823ef27b9b0acf /src/backend/tcop/postgres.c | |
| parent | 54d4a8f023783dd05d5f09136724997a73e33aa9 (diff) | |
| download | postgresql-b403f4107ba74bcf29499ba3e77e0eae70e62679.tar.gz postgresql-b403f4107ba74bcf29499ba3e77e0eae70e62679.zip | |
Make REPLICATION privilege checks test current user not authenticated user.
The pg_start_backup() and pg_stop_backup() functions checked the privileges
of the initially-authenticated user rather than the current user, which is
wrong. For example, a user-defined index function could successfully call
these functions when executed by ANALYZE within autovacuum. This could
allow an attacker with valid but low-privilege database access to interfere
with creation of routine backups. Reported and fixed by Noah Misch.
Security: CVE-2013-1901
Diffstat (limited to 'src/backend/tcop/postgres.c')
0 files changed, 0 insertions, 0 deletions