PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade postgresql84-docsUpgrade postgresql84-plpythonUpgrade postgresql-docsUpgrade postgresql-jdbcUpgrade postgresql84-tclUpgrade postgresql84-testUpgrade postgresql-tclUpgrade postgresql84Upgrade postgresql-plUpgrade postgresql84-serverUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql84-develUpgrade postgresql-develUpgrade postgresql84-pythonUpgrade postgresqlUpgrade postgresql84-contribUpgrade postgresql84-plperlUpgrade postgresql84-pltclUpgrade postgresql84-libsUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-python | Dec 1, 2016 | May 19, 2010 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-base.Upgrade dev-db/postgresql.Upgrade dev-db/postgresql-server. | Oct 30, 2017 | May 19, 2010 |
| Oracle_linux | — | Upgrade postgresql-plUpgrade postgresql84-serverUpgrade postgresql-contribUpgrade postgresql-pythonUpgrade postgresql84-develUpgrade postgresql84-pythonUpgrade postgresql84-pltclUpgrade postgresql-testUpgrade postgresql84-libsUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql84-docsUpgrade postgresql84-plperlUpgrade postgresql84Upgrade postgresqlUpgrade postgresql84-testUpgrade postgresql-tclUpgrade postgresql-develUpgrade postgresql84-contribUpgrade postgresql-docsUpgrade postgresql84-tclUpgrade postgresql84-plpython | Oct 16, 2024 | May 19, 2010 |
| Postgres | — | Upgrade to PostgreSQL version 8.4.4Upgrade to PostgreSQL version 8.0.25Upgrade to PostgreSQL version 8.3.11Upgrade to PostgreSQL version 8.1.21Upgrade to PostgreSQL version 8.2.17Upgrade to PostgreSQL version 7.4.29 | Feb 24, 2013 | May 19, 2010 |
| Redhat_linux | — | No solution exists | Jul 16, 2026 | May 17, 2010 |
| Suse | — | Upgrade postgresql93-develUpgrade postgresql93Upgrade postgresql-serverUpgrade postgresql93-serverUpgrade postgresql96-docsUpgrade postgresql10-develUpgrade postgresql10-plperlUpgrade libpq5Upgrade postgresql10-pltclUpgrade libpq5-32bitUpgrade postgresql96-contribUpgrade postgresql-libs-x86Upgrade postgresql96-serverUpgrade postgresql-docsUpgrade postgresql93-contribUpgrade postgresql94-develUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql94-serverUpgrade postgresql10-plpythonUpgrade postgresql93-docsUpgrade postgresql91-contribUpgrade postgresqlUpgrade postgresql10-serverUpgrade postgresql94-contribUpgrade postgresql10-docsUpgrade postgresql94Upgrade postgresql94-docsUpgrade postgresql10-contribUpgrade postgresql-libs-32bitUpgrade postgresql91Upgrade postgresql96Upgrade postgresql91-serverUpgrade postgresql96-develUpgrade postgresql10Upgrade postgresql91-docsUpgrade postgresql-libsUpgrade libecpg6 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade postgresql-pltcl-8.3Upgrade postgresql-plperl-8.1Upgrade postgresql-pltcl-8.4Upgrade postgresql-plperl-8.4Upgrade postgresql-pltcl-8.1Upgrade postgresql-plperl-8.3 | Nov 8, 2024 | May 19, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub