CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
78.2%
It was discovered that the Safe.pm module as used by PostgreSQL did not
properly restrict PL/perl procedures. If PostgreSQL was configured to use
Perl stored procedures, a remote authenticated attacker could exploit this
to execute arbitrary Perl code. (CVE-2010-1169)
It was discovered that PostgreSQL did not properly check permissions to
restrict PL/Tcl procedures. If PostgreSQL was configured to use Tcl stored
procedures, a remote authenticated attacker could exploit this to execute
arbitrary Tcl code. (CVE-2010-1170)
It was discovered that PostgreSQL did not properly check privileges during
certain RESET ALL operations. A remote authenticated attacker could exploit
this to remove all special parameter settings for a user or database.
(CVE-2010-1975)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 9.10 | noarch | postgresql-pltcl-8.4 | <ย 8.4.4-0ubuntu9.10 | UNKNOWN |
Ubuntu | 9.10 | noarch | libecpg-compat3 | <ย 8.4.4-0ubuntu9.10 | UNKNOWN |
Ubuntu | 9.10 | noarch | libecpg-dev | <ย 8.4.4-0ubuntu9.10 | UNKNOWN |
Ubuntu | 9.10 | noarch | libecpg6 | <ย 8.4.4-0ubuntu9.10 | UNKNOWN |
Ubuntu | 9.10 | noarch | libpgtypes3 | <ย 8.4.4-0ubuntu9.10 | UNKNOWN |
Ubuntu | 9.10 | noarch | libpq-dev | <ย 8.4.4-0ubuntu9.10 | UNKNOWN |
Ubuntu | 9.10 | noarch | libpq5 | <ย 8.4.4-0ubuntu9.10 | UNKNOWN |
Ubuntu | 9.10 | noarch | postgresql-8.4 | <ย 8.4.4-0ubuntu9.10 | UNKNOWN |
Ubuntu | 9.10 | noarch | postgresql-client-8.4 | <ย 8.4.4-0ubuntu9.10 | UNKNOWN |
Ubuntu | 9.10 | noarch | postgresql-contrib-8.4 | <ย 8.4.4-0ubuntu9.10 | UNKNOWN |