CVE - CVE-2010-1169

CVE-ID
CVE-2010-1169	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1023988 URL:http://www.securitytracker.com/id?1023988 MISC:39815 URL:http://secunia.com/advisories/39815 MISC:39820 URL:http://secunia.com/advisories/39820 MISC:39845 URL:http://secunia.com/advisories/39845 MISC:39898 URL:http://secunia.com/advisories/39898 MISC:39939 URL:http://secunia.com/advisories/39939 MISC:40215 URL:http://www.securityfocus.com/bid/40215 MISC:64755 URL:~~http://osvdb.org/64755~~ (Obsolete source) MISC:ADV-2010-1167 URL:~~http://www.vupen.com/english/advisories/2010/1167~~ (Obsolete source) MISC:ADV-2010-1182 URL:~~http://www.vupen.com/english/advisories/2010/1182~~ (Obsolete source) MISC:ADV-2010-1197 URL:~~http://www.vupen.com/english/advisories/2010/1197~~ (Obsolete source) MISC:ADV-2010-1198 URL:~~http://www.vupen.com/english/advisories/2010/1198~~ (Obsolete source) MISC:ADV-2010-1207 URL:~~http://www.vupen.com/english/advisories/2010/1207~~ (Obsolete source) MISC:ADV-2010-1221 URL:~~http://www.vupen.com/english/advisories/2010/1221~~ (Obsolete source) MISC:DSA-2051 URL:http://www.debian.org/security/2010/dsa-2051 MISC:FEDORA-2010-8696 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041559.html MISC:FEDORA-2010-8715 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041579.html MISC:FEDORA-2010-8723 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041591.html MISC:HPSBMU02781 URL:http://marc.info/?l=bugtraq&m=134124585221119&w=2 MISC:MDVSA-2010:103 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2010:103~~ (Obsolete source) MISC:RHSA-2010:0427 URL:http://www.redhat.com/support/errata/RHSA-2010-0427.html MISC:RHSA-2010:0428 URL:http://www.redhat.com/support/errata/RHSA-2010-0428.html MISC:RHSA-2010:0429 URL:http://www.redhat.com/support/errata/RHSA-2010-0429.html MISC:RHSA-2010:0430 URL:http://www.redhat.com/support/errata/RHSA-2010-0430.html MISC:SSRT100617 URL:http://marc.info/?l=bugtraq&m=134124585221119&w=2 MISC:SUSE-SR:2010:014 URL:http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html MISC:[oss-security] 20100520 CVE-2010-1974 reject request (dupe of CVE-2010-1168) and CVE-2010-1447 description modification request URL:http://www.openwall.com/lists/oss-security/2010/05/20/5 MISC:http://www.postgresql.org/about/news.1203 URL:http://www.postgresql.org/about/news.1203 MISC:http://www.postgresql.org/docs/current/static/release-7-4-29.html URL:http://www.postgresql.org/docs/current/static/release-7-4-29.html MISC:http://www.postgresql.org/docs/current/static/release-8-0-25.html URL:http://www.postgresql.org/docs/current/static/release-8-0-25.html MISC:http://www.postgresql.org/docs/current/static/release-8-1-21.html URL:http://www.postgresql.org/docs/current/static/release-8-1-21.html MISC:http://www.postgresql.org/docs/current/static/release-8-2-17.html URL:http://www.postgresql.org/docs/current/static/release-8-2-17.html MISC:http://www.postgresql.org/docs/current/static/release-8-3-11.html URL:http://www.postgresql.org/docs/current/static/release-8-3-11.html MISC:http://www.postgresql.org/docs/current/static/release-8-4-4.html URL:http://www.postgresql.org/docs/current/static/release-8-4-4.html MISC:http://www.postgresql.org/support/security URL:http://www.postgresql.org/support/security MISC:https://bugzilla.redhat.com/show_bug.cgi?id=582615 URL:https://bugzilla.redhat.com/show_bug.cgi?id=582615 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=588269 URL:https://bugzilla.redhat.com/show_bug.cgi?id=588269 MISC:oval:org.mitre.oval:def:10645 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10645 MISC:postgresql-safe-code-execution(58693) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/58693
Assigning CNA
Red Hat, Inc.
Date Record Created
20100329	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100329)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)