CVE-2010-1975 [Medium] | Security Vulnerability in Postgresql

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-06-15	0.28%	2.66%	+2.38%
2	2025-03-30	0.98%	0.28%	-0.70%
3	2025-03-29	—	0.98%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-06-15

0.28%

2.66%

+2.38%

2025-03-30

0.98%

0.28%

-0.70%

2025-03-29

—

0.98%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
5.5	2.0	MEDIUM	`AV:N/AC:L/Au:S/C:P/I:P/A:N` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:L) Exploitation conditions are straightforward and predictable. Authentication (AU:S) A single authentication is required. Confidentiality impact (C:P) Partial confidentiality impact. Integrity impact (I:P) Partial integrity impact. Availability impact (A:N) No availability impact.	8.0	4.9	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

5.5

2.0

MEDIUM

AV:N/AC:L/Au:S/C:P/I:P/A:N Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:L): Exploitation conditions are straightforward and predictable.
Authentication (AU:S): A single authentication is required.
Confidentiality impact (C:P): Partial confidentiality impact.
Integrity impact (I:P): Partial integrity impact.
Availability impact (A:N): No availability impact.

8.0

4.9

[email protected]

OS Trackers for CVE-2010-1975

vendor	priority	summary	link
`gentoo`	normal	CVE-2010-1975: 1 GLSA(s) (201110-22), 3 atom(s) (dev-db/postgresql, dev-db/postgresql-base, dev-db/postgresql-server); latest impact normal.	https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2010-1975
`redhat`	medium	—	https://access.redhat.com/security/cve/CVE-2010-1975
`ubuntu`	low	CVE-2010-1975 low priority: Ubuntu including 6 source packages (postgresql-7.4, postgresql-8.0, postgresql-8.1, postgresql-8.2, postgresql-8.3, postgresql-8.4), 48 status rows across 8 suites (dapper, hardy, jaunty, karmic, lucid, maverick, natty, upstream): DNE 31, released 10, ignored 4, needs-triage 3.	https://ubuntu.com/security/CVE-2010-1975

Affected software / configurations for CVE-2010-1975

Vendor	Product	Version	Raw CPE
postgresql	postgresql	7.4	cpe:2.3:a:postgresql:postgresql:7.4:::::::*
postgresql	postgresql	7.4.1	cpe:2.3:a:postgresql:postgresql:7.4.1:::::::*
postgresql	postgresql	7.4.2	cpe:2.3:a:postgresql:postgresql:7.4.2:::::::*
postgresql	postgresql	7.4.3	cpe:2.3:a:postgresql:postgresql:7.4.3:::::::*
postgresql	postgresql	7.4.4	cpe:2.3:a:postgresql:postgresql:7.4.4:::::::*
postgresql	postgresql	7.4.5	cpe:2.3:a:postgresql:postgresql:7.4.5:::::::*
postgresql	postgresql	7.4.6	cpe:2.3:a:postgresql:postgresql:7.4.6:::::::*
postgresql	postgresql	7.4.7	cpe:2.3:a:postgresql:postgresql:7.4.7:::::::*
postgresql	postgresql	7.4.8	cpe:2.3:a:postgresql:postgresql:7.4.8:::::::*
postgresql	postgresql	7.4.9	cpe:2.3:a:postgresql:postgresql:7.4.9:::::::*
postgresql	postgresql	7.4.10	cpe:2.3:a:postgresql:postgresql:7.4.10:::::::*
postgresql	postgresql	7.4.11	cpe:2.3:a:postgresql:postgresql:7.4.11:::::::*
postgresql	postgresql	7.4.12	cpe:2.3:a:postgresql:postgresql:7.4.12:::::::*
postgresql	postgresql	7.4.13	cpe:2.3:a:postgresql:postgresql:7.4.13:::::::*
postgresql	postgresql	7.4.14	cpe:2.3:a:postgresql:postgresql:7.4.14:::::::*
postgresql	postgresql	7.4.15	cpe:2.3:a:postgresql:postgresql:7.4.15:::::::*
postgresql	postgresql	7.4.16	cpe:2.3:a:postgresql:postgresql:7.4.16:::::::*
postgresql	postgresql	7.4.17	cpe:2.3:a:postgresql:postgresql:7.4.17:::::::*
postgresql	postgresql	7.4.18	cpe:2.3:a:postgresql:postgresql:7.4.18:::::::*
postgresql	postgresql	7.4.19	cpe:2.3:a:postgresql:postgresql:7.4.19:::::::*
postgresql	postgresql	7.4.20	cpe:2.3:a:postgresql:postgresql:7.4.20:::::::*
postgresql	postgresql	7.4.21	cpe:2.3:a:postgresql:postgresql:7.4.21:::::::*
postgresql	postgresql	7.4.22	cpe:2.3:a:postgresql:postgresql:7.4.22:::::::*
postgresql	postgresql	7.4.23	cpe:2.3:a:postgresql:postgresql:7.4.23:::::::*
postgresql	postgresql	7.4.24	cpe:2.3:a:postgresql:postgresql:7.4.24:::::::*
postgresql	postgresql	7.4.25	cpe:2.3:a:postgresql:postgresql:7.4.25:::::::*
postgresql	postgresql	7.4.26	cpe:2.3:a:postgresql:postgresql:7.4.26:::::::*
postgresql	postgresql	7.4.27	cpe:2.3:a:postgresql:postgresql:7.4.27:::::::*
postgresql	postgresql	7.4.28	cpe:2.3:a:postgresql:postgresql:7.4.28:::::::*
postgresql	postgresql	8.0	cpe:2.3:a:postgresql:postgresql:8.0:::::::*
postgresql	postgresql	8.0.0	cpe:2.3:a:postgresql:postgresql:8.0.0:::::::*
postgresql	postgresql	8.0.1	cpe:2.3:a:postgresql:postgresql:8.0.1:::::::*
postgresql	postgresql	8.0.2	cpe:2.3:a:postgresql:postgresql:8.0.2:::::::*
postgresql	postgresql	8.0.3	cpe:2.3:a:postgresql:postgresql:8.0.3:::::::*
postgresql	postgresql	8.0.4	cpe:2.3:a:postgresql:postgresql:8.0.4:::::::*
postgresql	postgresql	8.0.5	cpe:2.3:a:postgresql:postgresql:8.0.5:::::::*
postgresql	postgresql	8.0.6	cpe:2.3:a:postgresql:postgresql:8.0.6:::::::*
postgresql	postgresql	8.0.7	cpe:2.3:a:postgresql:postgresql:8.0.7:::::::*
postgresql	postgresql	8.0.8	cpe:2.3:a:postgresql:postgresql:8.0.8:::::::*
postgresql	postgresql	8.0.9	cpe:2.3:a:postgresql:postgresql:8.0.9:::::::*
postgresql	postgresql	8.0.10	cpe:2.3:a:postgresql:postgresql:8.0.10:::::::*
postgresql	postgresql	8.0.11	cpe:2.3:a:postgresql:postgresql:8.0.11:::::::*
postgresql	postgresql	8.0.12	cpe:2.3:a:postgresql:postgresql:8.0.12:::::::*
postgresql	postgresql	8.0.13	cpe:2.3:a:postgresql:postgresql:8.0.13:::::::*
postgresql	postgresql	8.0.14	cpe:2.3:a:postgresql:postgresql:8.0.14:::::::*
postgresql	postgresql	8.0.15	cpe:2.3:a:postgresql:postgresql:8.0.15:::::::*
postgresql	postgresql	8.0.16	cpe:2.3:a:postgresql:postgresql:8.0.16:::::::*
postgresql	postgresql	8.0.17	cpe:2.3:a:postgresql:postgresql:8.0.17:::::::*
postgresql	postgresql	8.0.18	cpe:2.3:a:postgresql:postgresql:8.0.18:::::::*
postgresql	postgresql	8.0.19	cpe:2.3:a:postgresql:postgresql:8.0.19:::::::*
postgresql	postgresql	8.0.20	cpe:2.3:a:postgresql:postgresql:8.0.20:::::::*
postgresql	postgresql	8.0.21	cpe:2.3:a:postgresql:postgresql:8.0.21:::::::*
postgresql	postgresql	8.0.22	cpe:2.3:a:postgresql:postgresql:8.0.22:::::::*
postgresql	postgresql	8.0.23	cpe:2.3:a:postgresql:postgresql:8.0.23:::::::*
postgresql	postgresql	8.0.24	cpe:2.3:a:postgresql:postgresql:8.0.24:::::::*
postgresql	postgresql	8.1	cpe:2.3:a:postgresql:postgresql:8.1:::::::*
postgresql	postgresql	8.1.0	cpe:2.3:a:postgresql:postgresql:8.1.0:::::::*
postgresql	postgresql	8.1.1	cpe:2.3:a:postgresql:postgresql:8.1.1:::::::*
postgresql	postgresql	8.1.2	cpe:2.3:a:postgresql:postgresql:8.1.2:::::::*
postgresql	postgresql	8.1.3	cpe:2.3:a:postgresql:postgresql:8.1.3:::::::*
postgresql	postgresql	8.1.4	cpe:2.3:a:postgresql:postgresql:8.1.4:::::::*
postgresql	postgresql	8.1.5	cpe:2.3:a:postgresql:postgresql:8.1.5:::::::*
postgresql	postgresql	8.1.6	cpe:2.3:a:postgresql:postgresql:8.1.6:::::::*
postgresql	postgresql	8.1.7	cpe:2.3:a:postgresql:postgresql:8.1.7:::::::*
postgresql	postgresql	8.1.8	cpe:2.3:a:postgresql:postgresql:8.1.8:::::::*
postgresql	postgresql	8.1.9	cpe:2.3:a:postgresql:postgresql:8.1.9:::::::*
postgresql	postgresql	8.1.10	cpe:2.3:a:postgresql:postgresql:8.1.10:::::::*
postgresql	postgresql	8.1.11	cpe:2.3:a:postgresql:postgresql:8.1.11:::::::*
postgresql	postgresql	8.1.12	cpe:2.3:a:postgresql:postgresql:8.1.12:::::::*
postgresql	postgresql	8.1.13	cpe:2.3:a:postgresql:postgresql:8.1.13:::::::*
postgresql	postgresql	8.1.14	cpe:2.3:a:postgresql:postgresql:8.1.14:::::::*
postgresql	postgresql	8.1.15	cpe:2.3:a:postgresql:postgresql:8.1.15:::::::*
postgresql	postgresql	8.1.16	cpe:2.3:a:postgresql:postgresql:8.1.16:::::::*
postgresql	postgresql	8.1.17	cpe:2.3:a:postgresql:postgresql:8.1.17:::::::*
postgresql	postgresql	8.1.18	cpe:2.3:a:postgresql:postgresql:8.1.18:::::::*
postgresql	postgresql	8.1.19	cpe:2.3:a:postgresql:postgresql:8.1.19:::::::*
postgresql	postgresql	8.1.20	cpe:2.3:a:postgresql:postgresql:8.1.20:::::::*
postgresql	postgresql	8.2	cpe:2.3:a:postgresql:postgresql:8.2:::::::*
postgresql	postgresql	8.2.1	cpe:2.3:a:postgresql:postgresql:8.2.1:::::::*
postgresql	postgresql	8.2.2	cpe:2.3:a:postgresql:postgresql:8.2.2:::::::*

References for CVE-2010-1975

URL	Tags
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
http://marc.info/?l=bugtraq&m=134124585221119&w=2
http://secunia.com/advisories/39939
http://www.debian.org/security/2010/dsa-2051
http://www.mandriva.com/security/advisories?name=MDVSA-2010:103
http://www.postgresql.org/docs/current/static/release-7-4-29.html
http://www.postgresql.org/docs/current/static/release-8-0-25.html
http://www.postgresql.org/docs/current/static/release-8-1-21.html
http://www.postgresql.org/docs/current/static/release-8-2-17.html
http://www.postgresql.org/docs/current/static/release-8-3-11.html
http://www.postgresql.org/docs/current/static/release-8-4-4.html
http://www.securityfocus.com/bid/40304
http://www.vupen.com/english/advisories/2010/1207
http://www.vupen.com/english/advisories/2010/1221
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11004

URL

CVE-2010-1975

Exploit prediction scoring system (EPSS) score for CVE-2010-1975

Common vulnerability scoring system (CVSS) metrics for CVE-2010-1975

Weakness enumeration for CVE-2010-1975

OS Trackers for CVE-2010-1975

Affected software / configurations for CVE-2010-1975

References for CVE-2010-1975