Lucene search
RootSSV:19652HistoryMay 20, 2010 - 12:00 a.m.
PostgreSQL PL/perl和PL/tcl存储过程绕过安全限制漏洞
2010-05-2000:00:00
Root
www.seebug.org
226
EPSS
0.006
Percentile
78.2%
BUGTRAQ ID: 40215
CVE ID: CVE-2010-1169,CVE-2010-1170,CVE-2010-1447
PostgreSQL是一款高级对象－关系型数据库管理系统，支持扩展的SQL标准子集。
PostgreSQL的PL/perl和PL/tcl存储过程中存在错误的权限检查，用户可以绕过pltcl_modules表等安全限制执行任意 Perl或Tcl脚本。
PostgreSQL 8.4
PostgreSQL 8.3
PostgreSQL 8.2
PostgreSQL 8.1
PostgreSQL 8.0
PostgreSQL 7.4
厂商补丁：
PostgreSQL
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
threatpost
threatpost
PostgreSQL Vulnerabilities Fixed
2010-05-17 14:36:50
openvas
openvas
PostgreSQL Multiple Security Vulnerabilities
2010-05-19 00:00:00
RedHat Update for postgresql84 RHSA-2010:0430-01
2010-05-28 00:00:00
RedHat Update for postgresql84 RHSA-2010:0430-01
2010-05-28 00:00:00
nessus
nessus
Fedora 12 : postgresql-8.4.4-1.fc12 (2010-8715)
2010-07-01 00:00:00
Scientific Linux Security Update : postgresql84 on SL5.x i386/x86_64
2012-08-01 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: postgresql-8.3.11-1.fc11
2010-05-18 21:57:56
[SECURITY] Fedora 13 Update: postgresql-8.4.4-1.fc13
2010-05-18 21:45:09
[SECURITY] Fedora 12 Update: postgresql-8.4.4-1.fc12
2010-05-18 21:53:33
securityvulns
securityvulns
PostgreSQL code execution
2010-05-26 00:00:00
[USN-942-1] PostgreSQL vulnerabilities
2010-05-26 00:00:00
[ MDVSA-2010:115 ] perl
2010-06-14 00:00:00
prion
prion
ubuntucve
ubuntucve
cve
cve
cvelist
cvelist
nvd
nvd
osv
osv
postgresql-8.3 - several
2010-05-24 00:00:00
debian
debian
BSA-005 Security Update for postgresql-8.4
2010-10-10 12:48:58
BSA-005 Security Update for postgresql-8.4
2010-10-10 12:48:45
[Backports-security-announce] Security Update for postgresql-8.4
2010-05-25 11:30:45
oraclelinux
oraclelinux
postgresql84 security update
2010-05-19 00:00:00
postgresql security update
2010-05-19 00:00:00
postgresql security update
2010-05-19 00:00:00
centos
centos
postgresql84 security update
2010-05-28 10:47:00
rh security update
2010-05-21 22:01:26
postgresql security update
2010-05-21 22:22:02
redhat
redhat
(RHSA-2010:0430) Moderate: postgresql84 security update
2010-05-19 00:00:00
(RHSA-2010:0427) Moderate: postgresql security update
2010-05-19 00:00:00
(RHSA-2010:0428) Moderate: postgresql security update
2010-05-19 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2010-05-21 00:00:00
Perl vulnerabilities
2011-05-03 00:00:00
veracode
veracode
Access Restriction Bypass
2020-04-10 00:48:52
Remote Code Execution (RCE)
2020-04-10 00:48:52
Remote Code Execution (RCE)
2020-04-10 00:49:01
postgresql
postgresql
Vulnerability in core server (CVE-2010-1169)
2010-05-19 18:30:00
Vulnerability in core server (CVE-2010-1170)
2010-05-19 18:30:00
debiancve
debiancve
CVE-2010-1447
2010-05-19 18:30:03
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2011-10-25 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-08-31 00:00:00
VMware ESX third party updates for Service Console
2010-08-31 00:00:00
seebug
seebug
VMware ESX Service Console多个安全漏洞
2012-01-13 00:00:00