Lucene search

[email protected]NVD:CVE-2010-1169

HistoryMay 19, 2010 - 6:30 p.m.

CVE-2010-1169

2010-05-1918:30:02

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.006

Percentile

78.2%

JSON

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.

Affected configurations

Nvd

Node

postgresqlpostgresqlMatch7.4

postgresqlpostgresqlMatch7.4.1

postgresqlpostgresqlMatch7.4.2

postgresqlpostgresqlMatch7.4.3

postgresqlpostgresqlMatch7.4.4

postgresqlpostgresqlMatch7.4.5

postgresqlpostgresqlMatch7.4.6

postgresqlpostgresqlMatch7.4.7

postgresqlpostgresqlMatch7.4.8

postgresqlpostgresqlMatch7.4.9

postgresqlpostgresqlMatch7.4.10

postgresqlpostgresqlMatch7.4.11

postgresqlpostgresqlMatch7.4.12

postgresqlpostgresqlMatch7.4.13

postgresqlpostgresqlMatch7.4.14

postgresqlpostgresqlMatch7.4.15

postgresqlpostgresqlMatch7.4.16

postgresqlpostgresqlMatch7.4.17

postgresqlpostgresqlMatch7.4.18

postgresqlpostgresqlMatch7.4.19

postgresqlpostgresqlMatch7.4.20

postgresqlpostgresqlMatch7.4.21

postgresqlpostgresqlMatch7.4.22

postgresqlpostgresqlMatch7.4.23

postgresqlpostgresqlMatch7.4.24

postgresqlpostgresqlMatch7.4.25

postgresqlpostgresqlMatch7.4.26

postgresqlpostgresqlMatch7.4.27

postgresqlpostgresqlMatch7.4.28

Node

postgresqlpostgresqlMatch8.0

postgresqlpostgresqlMatch8.0.0

postgresqlpostgresqlMatch8.0.1

postgresqlpostgresqlMatch8.0.2

postgresqlpostgresqlMatch8.0.3

postgresqlpostgresqlMatch8.0.4

postgresqlpostgresqlMatch8.0.5

postgresqlpostgresqlMatch8.0.6

postgresqlpostgresqlMatch8.0.7

postgresqlpostgresqlMatch8.0.8

postgresqlpostgresqlMatch8.0.9

postgresqlpostgresqlMatch8.0.10

postgresqlpostgresqlMatch8.0.11

postgresqlpostgresqlMatch8.0.12

postgresqlpostgresqlMatch8.0.13

postgresqlpostgresqlMatch8.0.14

postgresqlpostgresqlMatch8.0.15

postgresqlpostgresqlMatch8.0.16

postgresqlpostgresqlMatch8.0.17

postgresqlpostgresqlMatch8.0.18

postgresqlpostgresqlMatch8.0.19

postgresqlpostgresqlMatch8.0.20

postgresqlpostgresqlMatch8.0.21

postgresqlpostgresqlMatch8.0.22

postgresqlpostgresqlMatch8.0.23

postgresqlpostgresqlMatch8.0.24

Node

postgresqlpostgresqlMatch8.1

postgresqlpostgresqlMatch8.1.0

postgresqlpostgresqlMatch8.1.1

postgresqlpostgresqlMatch8.1.2

postgresqlpostgresqlMatch8.1.3

postgresqlpostgresqlMatch8.1.4

postgresqlpostgresqlMatch8.1.5

postgresqlpostgresqlMatch8.1.6

postgresqlpostgresqlMatch8.1.7

postgresqlpostgresqlMatch8.1.8

postgresqlpostgresqlMatch8.1.9

postgresqlpostgresqlMatch8.1.10

postgresqlpostgresqlMatch8.1.11

postgresqlpostgresqlMatch8.1.12

postgresqlpostgresqlMatch8.1.13

postgresqlpostgresqlMatch8.1.14

postgresqlpostgresqlMatch8.1.15

postgresqlpostgresqlMatch8.1.16

postgresqlpostgresqlMatch8.1.17

postgresqlpostgresqlMatch8.1.18

postgresqlpostgresqlMatch8.1.19

postgresqlpostgresqlMatch8.1.20

Node

postgresqlpostgresqlMatch8.2

postgresqlpostgresqlMatch8.2.1

postgresqlpostgresqlMatch8.2.2

postgresqlpostgresqlMatch8.2.3

postgresqlpostgresqlMatch8.2.4

postgresqlpostgresqlMatch8.2.5

postgresqlpostgresqlMatch8.2.6

postgresqlpostgresqlMatch8.2.7

postgresqlpostgresqlMatch8.2.8

postgresqlpostgresqlMatch8.2.9

postgresqlpostgresqlMatch8.2.10

postgresqlpostgresqlMatch8.2.11

postgresqlpostgresqlMatch8.2.12

postgresqlpostgresqlMatch8.2.13

postgresqlpostgresqlMatch8.2.14

postgresqlpostgresqlMatch8.2.15

postgresqlpostgresqlMatch8.2.16

Node

postgresqlpostgresqlMatch8.3

postgresqlpostgresqlMatch8.3.1

postgresqlpostgresqlMatch8.3.2

postgresqlpostgresqlMatch8.3.3

postgresqlpostgresqlMatch8.3.4

postgresqlpostgresqlMatch8.3.5

postgresqlpostgresqlMatch8.3.6

postgresqlpostgresqlMatch8.3.7

postgresqlpostgresqlMatch8.3.8

postgresqlpostgresqlMatch8.3.9

postgresqlpostgresqlMatch8.3.10

Node

postgresqlpostgresqlMatch8.4

postgresqlpostgresqlMatch8.4.1

postgresqlpostgresqlMatch8.4.2

postgresqlpostgresqlMatch8.4.3

Node

postgresqlpostgresqlMatch9.0.0beta1

VendorProductVersionCPE
postgresqlpostgresql7.4cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*
postgresqlpostgresql7.4.1cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*
postgresqlpostgresql7.4.2cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*
postgresqlpostgresql7.4.3cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*
postgresqlpostgresql7.4.4cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*
postgresqlpostgresql7.4.5cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*
postgresqlpostgresql7.4.6cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*
postgresqlpostgresql7.4.7cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*
postgresqlpostgresql7.4.8cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*
postgresqlpostgresql7.4.9cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
postgresql	postgresql	7.4	cpe:2.3:a:postgresql:postgresql:7.4:::::::*
postgresql	postgresql	7.4.1	cpe:2.3:a:postgresql:postgresql:7.4.1:::::::*
postgresql	postgresql	7.4.2	cpe:2.3:a:postgresql:postgresql:7.4.2:::::::*
postgresql	postgresql	7.4.3	cpe:2.3:a:postgresql:postgresql:7.4.3:::::::*
postgresql	postgresql	7.4.4	cpe:2.3:a:postgresql:postgresql:7.4.4:::::::*
postgresql	postgresql	7.4.5	cpe:2.3:a:postgresql:postgresql:7.4.5:::::::*
postgresql	postgresql	7.4.6	cpe:2.3:a:postgresql:postgresql:7.4.6:::::::*
postgresql	postgresql	7.4.7	cpe:2.3:a:postgresql:postgresql:7.4.7:::::::*
postgresql	postgresql	7.4.8	cpe:2.3:a:postgresql:postgresql:7.4.8:::::::*
postgresql	postgresql	7.4.9	cpe:2.3:a:postgresql:postgresql:7.4.9:::::::*

Rows per page:

1-10 of 1101

References

lists.fedoraproject.org/pipermail/package-announce/2010-May/041559.html

lists.fedoraproject.org/pipermail/package-announce/2010-May/041579.html

lists.fedoraproject.org/pipermail/package-announce/2010-May/041591.html

lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html

marc.info/?l=bugtraq&m=134124585221119&w=2

osvdb.org/64755

secunia.com/advisories/39815

secunia.com/advisories/39820

secunia.com/advisories/39845

secunia.com/advisories/39898

secunia.com/advisories/39939

www.debian.org/security/2010/dsa-2051

www.mandriva.com/security/advisories?name=MDVSA-2010:103

www.openwall.com/lists/oss-security/2010/05/20/5

www.postgresql.org/about/news.1203

www.postgresql.org/docs/current/static/release-7-4-29.html

www.postgresql.org/docs/current/static/release-8-0-25.html

www.postgresql.org/docs/current/static/release-8-1-21.html

www.postgresql.org/docs/current/static/release-8-2-17.html

www.postgresql.org/docs/current/static/release-8-3-11.html

www.postgresql.org/docs/current/static/release-8-4-4.html

www.postgresql.org/support/security

www.redhat.com/support/errata/RHSA-2010-0427.html

www.redhat.com/support/errata/RHSA-2010-0428.html

www.redhat.com/support/errata/RHSA-2010-0429.html

www.redhat.com/support/errata/RHSA-2010-0430.html

www.securityfocus.com/bid/40215

www.securitytracker.com/id?1023988

www.vupen.com/english/advisories/2010/1167

www.vupen.com/english/advisories/2010/1182

www.vupen.com/english/advisories/2010/1197

www.vupen.com/english/advisories/2010/1198

www.vupen.com/english/advisories/2010/1207

www.vupen.com/english/advisories/2010/1221

bugzilla.redhat.com/show_bug.cgi?id=582615

bugzilla.redhat.com/show_bug.cgi?id=588269

exchange.xforce.ibmcloud.com/vulnerabilities/58693

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10645

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.006

Percentile

78.2%

JSON

Related for NVD:CVE-2010-1169

cvelist3 ubuntucve4 prion3 cve3 seebug2 threatpost1 openvas70 veracode2 postgresql1 osv4 debian6 nvd2 nessus51 debiancve1 fedora11 securityvulns6 oraclelinux6 redhat6 centos5 ubuntu2 gentoo1 vmware2