The PostgreSQL VACUUM command contains a vulnerability that allows an unprivileged user to remove database transaction log data. This may result in unrecoverable data loss.
PostgreSQL is a database management system. The PostgreSQL VACUUM command is used to clean out records from rolled back transactions and update statistics in the system catalog. There is a flaw in the PostgreSQL VACUUM command that could allow an unprivileged user to remove database transaction log data prematurely.
An attacker could remove database transaction log data. The premature removal of transaction logs may result in unrecoverable data loss.
Thanks to Red Hat for the information contained in their security advisory.
This document was written by Damon Morda.
|Date First Published:||2004-01-15|
|Date Last Updated:||2004-01-15 18:30 UTC|