Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2009-4136

21
FAUCET Score

CVE-2009-4136 is a privilege escalation vulnerability affecting multiple versions of PostgreSQL (7.4.x through 8.4.x). It allows remote authenticated users to gain elevated privileges by exploiting improper session-local state management during index function execution by a superuser, specifically through crafted index functions that modify search_path or prepared statements. With a CVSS score of 6.5 (medium), this vulnerability has a network attack vector, low attack complexity, and can lead to partial confidentiality, integrity, and availability impacts. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has garnered some community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
7.4.1CPE matchmatch criteria
cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*
7.4.2CPE matchmatch criteria
cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*
7.4.3CPE matchmatch criteria
cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*
7.4.4CPE matchmatch criteria
cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*
7.4.5CPE matchmatch criteria
cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.5MEDIUM

AV:N/AC:L/Au:S/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Exploitability Score
8.0
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
3.64%
Probability of exploitation in next 30 days
EPSS Percentile
88.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0364 is in the 96th percentile among its peer group of 21,958 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

redhatpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: rh-postgresql-0:7.3.21-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: postgresql-0:7.4.29-1.el4_8.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: postgresql-0:8.1.21-1.el5_5.1
View patch

Vendor Advisories (1)

redhatCVE-2009-4136Low

postgresql: SQL privilege escalation via modifications to session-local state

Dec 14, 2009

References

lists.opensuse.org / opensuse-security-announce/2010-01/msg00007.html
marc.info
osvdb.org / 61039
bugzilla.redhat.com / show_bug.cgi
Patch
secunia.com / advisories/37663
secunia.com / advisories/39820
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9358
redhat.com / archives/fedora-package-announce/2009-December/msg01035.html
redhat.com / archives/fedora-package-announce/2009-December/msg01056.html
wiki.rpath.com / wiki/Advisories:rPSA-2010-0012
mandriva.com / security/advisories
postgresql.org / docs/current/static/release-7-4-27.html
PatchVendor Advisory
postgresql.org / docs/current/static/release-8-0-23.html
PatchVendor Advisory
postgresql.org / docs/current/static/release-8-1-19.html
PatchVendor Advisory
postgresql.org / docs/current/static/release-8-2-15.html
PatchVendor Advisory
postgresql.org / docs/current/static/release-8-3-9.html
PatchVendor Advisory
postgresql.org / docs/current/static/release-8-4-2.html
PatchVendor Advisory
postgresql.org / support/security.html
Vendor Advisory
redhat.com / support/errata/RHSA-2010-0427.html
redhat.com / support/errata/RHSA-2010-0428.html
redhat.com / support/errata/RHSA-2010-0429.html
securityfocus.com / archive/1/509917/100/0/threaded
securityfocus.com / bid/37333
securitytracker.com / id
vupen.com / english/advisories/2009/3519
vupen.com / english/advisories/2010/1197