UbuntuUSN-1002-2PostgreSQL vulnerability
6.8 Medium
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.04 Low
EPSS
Percentile
91.9%
Releases
- Ubuntu 10.10
Packages
- postgresql-8.4 -
Details
USN-1002-1 fixed vulnerabilities in PostgreSQL. This update provides the
corresponding update for Ubuntu 10.10.
Original advisory details:
It was discovered that PostgreSQL did not properly enforce permissions
within sessions when PL/Perl and PL/Tcl functions or operators were
redefined. A remote authenticated attacker could exploit this to execute
arbitrary code with permissions of a different user, possibly leading to
privilege escalation.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 10.10 | noarch | postgresql-pltcl-8.4 | < 8.4.5-0ubuntu10.10 | UNKNOWN |
| Ubuntu | 10.10 | noarch | libecpg-compat3 | < 8.4.5-0ubuntu10.10 | UNKNOWN |
| Ubuntu | 10.10 | noarch | libecpg-dev | < 8.4.5-0ubuntu10.10 | UNKNOWN |
| Ubuntu | 10.10 | noarch | libecpg6 | < 8.4.5-0ubuntu10.10 | UNKNOWN |
| Ubuntu | 10.10 | noarch | libpgtypes3 | < 8.4.5-0ubuntu10.10 | UNKNOWN |
| Ubuntu | 10.10 | noarch | libpq-dev | < 8.4.5-0ubuntu10.10 | UNKNOWN |
| Ubuntu | 10.10 | noarch | libpq5 | < 8.4.5-0ubuntu10.10 | UNKNOWN |
| Ubuntu | 10.10 | noarch | postgresql-8.4 | < 8.4.5-0ubuntu10.10 | UNKNOWN |
| Ubuntu | 10.10 | noarch | postgresql-client-8.4 | < 8.4.5-0ubuntu10.10 | UNKNOWN |
| Ubuntu | 10.10 | noarch | postgresql-contrib-8.4 | < 8.4.5-0ubuntu10.10 | UNKNOWN |
References
Related
6.8 Medium
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.04 Low
EPSS
Percentile
91.9%