Ubuntu.comUB:CVE-2010-3433CVE-2010-3433
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.04 Low
EPSS
Percentile
92.1%
The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0
before 8.0.26, 8.1 before 8.1.22, 8.2 before 8.2.18, 8.3 before 8.3.12, 8.4
before 8.4.5, and 9.0 before 9.0.1 do not properly protect script execution
by a different SQL user identity within the same session, which allows
remote authenticated users to gain privileges via crafted script code in a
SECURITY DEFINER function, as demonstrated by (1) redefining standard
functions or (2) redefining operators, a different vulnerability than
CVE-2010-1168, CVE-2010-1169, CVE-2010-1170, and CVE-2010-1447.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | postgresql-8.1 | <ย 8.1.22-0ubuntu0.6.06 | UNKNOWN |
| ubuntu | 8.04 | noarch | postgresql-8.3 | <ย 8.3.12-0ubuntu8.04 | UNKNOWN |
| ubuntu | 9.04 | noarch | postgresql-8.3 | <ย 8.3.12-0ubuntu9.04 | UNKNOWN |
| ubuntu | 9.10 | noarch | postgresql-8.4 | <ย 8.4.5-0ubuntu9.10 | UNKNOWN |
| ubuntu | 10.04 | noarch | postgresql-8.4 | <ย 8.4.5-0ubuntu10.04 | UNKNOWN |
| ubuntu | 10.10 | noarch | postgresql-8.4 | <ย 8.4.5-0ubuntu10.10 | UNKNOWN |
| ubuntu | 11.04 | noarch | postgresql-8.4 | <ย 8.4.5-0ubuntu10.10 | UNKNOWN |
| ubuntu | 11.10 | noarch | postgresql-8.4 | <ย 8.4.5-0ubuntu10.10 | UNKNOWN |
Related
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.04 Low
EPSS
Percentile
92.1%