Lucene search

RedhatCVE-2010-1169

HistoryMay 19, 2010 - 6:30 p.m.

CVE-2010-1169

2010-05-1918:30:02

CWE-94

redhat

web.nvd.nist.gov

243

postgresql

cve-2010-1169

pl/perl

remote code execution

safe module

nvd

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.006

Percentile

78.2%

JSON

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.

Affected configurations

Nvd

Node

postgresqlpostgresqlMatch7.4

postgresqlpostgresqlMatch7.4.1

postgresqlpostgresqlMatch7.4.2

postgresqlpostgresqlMatch7.4.3

postgresqlpostgresqlMatch7.4.4

postgresqlpostgresqlMatch7.4.5

postgresqlpostgresqlMatch7.4.6

postgresqlpostgresqlMatch7.4.7

postgresqlpostgresqlMatch7.4.8

postgresqlpostgresqlMatch7.4.9

postgresqlpostgresqlMatch7.4.10

postgresqlpostgresqlMatch7.4.11

postgresqlpostgresqlMatch7.4.12

postgresqlpostgresqlMatch7.4.13

postgresqlpostgresqlMatch7.4.14

postgresqlpostgresqlMatch7.4.15

postgresqlpostgresqlMatch7.4.16

postgresqlpostgresqlMatch7.4.17

postgresqlpostgresqlMatch7.4.18

postgresqlpostgresqlMatch7.4.19

postgresqlpostgresqlMatch7.4.20

postgresqlpostgresqlMatch7.4.21

postgresqlpostgresqlMatch7.4.22

postgresqlpostgresqlMatch7.4.23

postgresqlpostgresqlMatch7.4.24

postgresqlpostgresqlMatch7.4.25

postgresqlpostgresqlMatch7.4.26

postgresqlpostgresqlMatch7.4.27

postgresqlpostgresqlMatch7.4.28

Node

postgresqlpostgresqlMatch8.0

postgresqlpostgresqlMatch8.0.0

postgresqlpostgresqlMatch8.0.1

postgresqlpostgresqlMatch8.0.2

postgresqlpostgresqlMatch8.0.3

postgresqlpostgresqlMatch8.0.4

postgresqlpostgresqlMatch8.0.5

postgresqlpostgresqlMatch8.0.6

postgresqlpostgresqlMatch8.0.7

postgresqlpostgresqlMatch8.0.8

postgresqlpostgresqlMatch8.0.9

postgresqlpostgresqlMatch8.0.10

postgresqlpostgresqlMatch8.0.11

postgresqlpostgresqlMatch8.0.12

postgresqlpostgresqlMatch8.0.13

postgresqlpostgresqlMatch8.0.14

postgresqlpostgresqlMatch8.0.15

postgresqlpostgresqlMatch8.0.16

postgresqlpostgresqlMatch8.0.17

postgresqlpostgresqlMatch8.0.18

postgresqlpostgresqlMatch8.0.19

postgresqlpostgresqlMatch8.0.20

postgresqlpostgresqlMatch8.0.21

postgresqlpostgresqlMatch8.0.22

postgresqlpostgresqlMatch8.0.23

postgresqlpostgresqlMatch8.0.24

Node

postgresqlpostgresqlMatch8.1

postgresqlpostgresqlMatch8.1.0

postgresqlpostgresqlMatch8.1.1

postgresqlpostgresqlMatch8.1.2

postgresqlpostgresqlMatch8.1.3

postgresqlpostgresqlMatch8.1.4

postgresqlpostgresqlMatch8.1.5

postgresqlpostgresqlMatch8.1.6

postgresqlpostgresqlMatch8.1.7

postgresqlpostgresqlMatch8.1.8

postgresqlpostgresqlMatch8.1.9

postgresqlpostgresqlMatch8.1.10

postgresqlpostgresqlMatch8.1.11

postgresqlpostgresqlMatch8.1.12

postgresqlpostgresqlMatch8.1.13

postgresqlpostgresqlMatch8.1.14

postgresqlpostgresqlMatch8.1.15

postgresqlpostgresqlMatch8.1.16

postgresqlpostgresqlMatch8.1.17

postgresqlpostgresqlMatch8.1.18

postgresqlpostgresqlMatch8.1.19

postgresqlpostgresqlMatch8.1.20

Node

postgresqlpostgresqlMatch8.2

postgresqlpostgresqlMatch8.2.1

postgresqlpostgresqlMatch8.2.2

postgresqlpostgresqlMatch8.2.3

postgresqlpostgresqlMatch8.2.4

postgresqlpostgresqlMatch8.2.5

postgresqlpostgresqlMatch8.2.6

postgresqlpostgresqlMatch8.2.7

postgresqlpostgresqlMatch8.2.8

postgresqlpostgresqlMatch8.2.9

postgresqlpostgresqlMatch8.2.10

postgresqlpostgresqlMatch8.2.11

postgresqlpostgresqlMatch8.2.12

postgresqlpostgresqlMatch8.2.13

postgresqlpostgresqlMatch8.2.14

postgresqlpostgresqlMatch8.2.15

postgresqlpostgresqlMatch8.2.16

Node

postgresqlpostgresqlMatch8.3

postgresqlpostgresqlMatch8.3.1

postgresqlpostgresqlMatch8.3.2

postgresqlpostgresqlMatch8.3.3

postgresqlpostgresqlMatch8.3.4

postgresqlpostgresqlMatch8.3.5

postgresqlpostgresqlMatch8.3.6

postgresqlpostgresqlMatch8.3.7

postgresqlpostgresqlMatch8.3.8

postgresqlpostgresqlMatch8.3.9

postgresqlpostgresqlMatch8.3.10

Node

postgresqlpostgresqlMatch8.4

postgresqlpostgresqlMatch8.4.1

postgresqlpostgresqlMatch8.4.2

postgresqlpostgresqlMatch8.4.3

Node

postgresqlpostgresqlMatch9.0.0beta1

VendorProductVersionCPE
postgresqlpostgresql7.4.19cpe:/a:postgresql:postgresql:7.4.19:::
postgresqlpostgresql7.4.7cpe:/a:postgresql:postgresql:7.4.7:::
postgresqlpostgresql7.4.22cpe:/a:postgresql:postgresql:7.4.22:::
postgresqlpostgresql7.4.12cpe:/a:postgresql:postgresql:7.4.12:::
postgresqlpostgresql7.4.23cpe:/a:postgresql:postgresql:7.4.23:::
postgresqlpostgresql7.4.18cpe:/a:postgresql:postgresql:7.4.18:::
postgresqlpostgresql7.4cpe:/a:postgresql:postgresql:7.4:::
postgresqlpostgresql7.4.17cpe:/a:postgresql:postgresql:7.4.17:::
postgresqlpostgresql7.4.14cpe:/a:postgresql:postgresql:7.4.14:::
postgresqlpostgresql7.4.3cpe:/a:postgresql:postgresql:7.4.3:::

Vendor	Product	Version	CPE
postgresql	postgresql	7.4.19	cpe:/a:postgresql:postgresql:7.4.19:::
postgresql	postgresql	7.4.7	cpe:/a:postgresql:postgresql:7.4.7:::
postgresql	postgresql	7.4.22	cpe:/a:postgresql:postgresql:7.4.22:::
postgresql	postgresql	7.4.12	cpe:/a:postgresql:postgresql:7.4.12:::
postgresql	postgresql	7.4.23	cpe:/a:postgresql:postgresql:7.4.23:::
postgresql	postgresql	7.4.18	cpe:/a:postgresql:postgresql:7.4.18:::
postgresql	postgresql	7.4	cpe:/a:postgresql:postgresql:7.4:::
postgresql	postgresql	7.4.17	cpe:/a:postgresql:postgresql:7.4.17:::
postgresql	postgresql	7.4.14	cpe:/a:postgresql:postgresql:7.4.14:::
postgresql	postgresql	7.4.3	cpe:/a:postgresql:postgresql:7.4.3:::

Rows per page:

1-10 of 291

References

lists.fedoraproject.org/pipermail/package-announce/2010-May/041559.html

lists.fedoraproject.org/pipermail/package-announce/2010-May/041579.html

lists.fedoraproject.org/pipermail/package-announce/2010-May/041591.html

lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html

marc.info/?l=bugtraq&m=134124585221119&w=2

osvdb.org/64755

secunia.com/advisories/39815

secunia.com/advisories/39820

secunia.com/advisories/39845

secunia.com/advisories/39898

secunia.com/advisories/39939

www.debian.org/security/2010/dsa-2051

www.mandriva.com/security/advisories?name=MDVSA-2010:103

www.openwall.com/lists/oss-security/2010/05/20/5

www.postgresql.org/about/news.1203

www.postgresql.org/docs/current/static/release-7-4-29.html

www.postgresql.org/docs/current/static/release-8-0-25.html

www.postgresql.org/docs/current/static/release-8-1-21.html

www.postgresql.org/docs/current/static/release-8-2-17.html

www.postgresql.org/docs/current/static/release-8-3-11.html

www.postgresql.org/docs/current/static/release-8-4-4.html

www.postgresql.org/support/security

www.redhat.com/support/errata/RHSA-2010-0427.html

www.redhat.com/support/errata/RHSA-2010-0428.html

www.redhat.com/support/errata/RHSA-2010-0429.html

www.redhat.com/support/errata/RHSA-2010-0430.html

www.securityfocus.com/bid/40215

www.securitytracker.com/id?1023988

www.vupen.com/english/advisories/2010/1167

www.vupen.com/english/advisories/2010/1182

www.vupen.com/english/advisories/2010/1197

www.vupen.com/english/advisories/2010/1198

www.vupen.com/english/advisories/2010/1207

www.vupen.com/english/advisories/2010/1221

bugzilla.redhat.com/show_bug.cgi?id=582615

bugzilla.redhat.com/show_bug.cgi?id=588269

exchange.xforce.ibmcloud.com/vulnerabilities/58693

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10645

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.006

Percentile

78.2%

JSON

Related for CVE-2010-1169