Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-1169


PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.


Published

2010-05-19T18:30:02.600

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 8.5 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

6.8

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-94

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application postgresql postgresql 7.4 Yes
Application postgresql postgresql 7.4.1 Yes
Application postgresql postgresql 7.4.2 Yes
Application postgresql postgresql 7.4.3 Yes
Application postgresql postgresql 7.4.4 Yes
Application postgresql postgresql 7.4.5 Yes
Application postgresql postgresql 7.4.6 Yes
Application postgresql postgresql 7.4.7 Yes
Application postgresql postgresql 7.4.8 Yes
Application postgresql postgresql 7.4.9 Yes
Application postgresql postgresql 7.4.10 Yes
Application postgresql postgresql 7.4.11 Yes
Application postgresql postgresql 7.4.12 Yes
Application postgresql postgresql 7.4.13 Yes
Application postgresql postgresql 7.4.14 Yes
Application postgresql postgresql 7.4.15 Yes
Application postgresql postgresql 7.4.16 Yes
Application postgresql postgresql 7.4.17 Yes
Application postgresql postgresql 7.4.18 Yes
Application postgresql postgresql 7.4.19 Yes
Application postgresql postgresql 7.4.20 Yes
Application postgresql postgresql 7.4.21 Yes
Application postgresql postgresql 7.4.22 Yes
Application postgresql postgresql 7.4.23 Yes
Application postgresql postgresql 7.4.24 Yes
Application postgresql postgresql 7.4.25 Yes
Application postgresql postgresql 7.4.26 Yes
Application postgresql postgresql 7.4.27 Yes
Application postgresql postgresql 7.4.28 Yes
Application postgresql postgresql 8.0 Yes
Application postgresql postgresql 8.0.0 Yes
Application postgresql postgresql 8.0.1 Yes
Application postgresql postgresql 8.0.2 Yes
Application postgresql postgresql 8.0.3 Yes
Application postgresql postgresql 8.0.4 Yes
Application postgresql postgresql 8.0.5 Yes
Application postgresql postgresql 8.0.6 Yes
Application postgresql postgresql 8.0.7 Yes
Application postgresql postgresql 8.0.8 Yes
Application postgresql postgresql 8.0.9 Yes
Application postgresql postgresql 8.0.10 Yes
Application postgresql postgresql 8.0.11 Yes
Application postgresql postgresql 8.0.12 Yes
Application postgresql postgresql 8.0.13 Yes
Application postgresql postgresql 8.0.14 Yes
Application postgresql postgresql 8.0.15 Yes
Application postgresql postgresql 8.0.16 Yes
Application postgresql postgresql 8.0.17 Yes
Application postgresql postgresql 8.0.18 Yes
Application postgresql postgresql 8.0.19 Yes
Application postgresql postgresql 8.0.20 Yes
Application postgresql postgresql 8.0.21 Yes
Application postgresql postgresql 8.0.22 Yes
Application postgresql postgresql 8.0.23 Yes
Application postgresql postgresql 8.0.24 Yes
Application postgresql postgresql 8.1 Yes
Application postgresql postgresql 8.1.0 Yes
Application postgresql postgresql 8.1.1 Yes
Application postgresql postgresql 8.1.2 Yes
Application postgresql postgresql 8.1.3 Yes
Application postgresql postgresql 8.1.4 Yes
Application postgresql postgresql 8.1.5 Yes
Application postgresql postgresql 8.1.6 Yes
Application postgresql postgresql 8.1.7 Yes
Application postgresql postgresql 8.1.8 Yes
Application postgresql postgresql 8.1.9 Yes
Application postgresql postgresql 8.1.10 Yes
Application postgresql postgresql 8.1.11 Yes
Application postgresql postgresql 8.1.12 Yes
Application postgresql postgresql 8.1.13 Yes
Application postgresql postgresql 8.1.14 Yes
Application postgresql postgresql 8.1.15 Yes
Application postgresql postgresql 8.1.16 Yes
Application postgresql postgresql 8.1.17 Yes
Application postgresql postgresql 8.1.18 Yes
Application postgresql postgresql 8.1.19 Yes
Application postgresql postgresql 8.1.20 Yes
Application postgresql postgresql 8.2 Yes
Application postgresql postgresql 8.2.1 Yes
Application postgresql postgresql 8.2.2 Yes
Application postgresql postgresql 8.2.3 Yes
Application postgresql postgresql 8.2.4 Yes
Application postgresql postgresql 8.2.5 Yes
Application postgresql postgresql 8.2.6 Yes
Application postgresql postgresql 8.2.7 Yes
Application postgresql postgresql 8.2.8 Yes
Application postgresql postgresql 8.2.9 Yes
Application postgresql postgresql 8.2.10 Yes
Application postgresql postgresql 8.2.11 Yes
Application postgresql postgresql 8.2.12 Yes
Application postgresql postgresql 8.2.13 Yes
Application postgresql postgresql 8.2.14 Yes
Application postgresql postgresql 8.2.15 Yes
Application postgresql postgresql 8.2.16 Yes
Application postgresql postgresql 8.3 Yes
Application postgresql postgresql 8.3.1 Yes
Application postgresql postgresql 8.3.2 Yes
Application postgresql postgresql 8.3.3 Yes
Application postgresql postgresql 8.3.4 Yes
Application postgresql postgresql 8.3.5 Yes
Application postgresql postgresql 8.3.6 Yes
Application postgresql postgresql 8.3.7 Yes
Application postgresql postgresql 8.3.8 Yes
Application postgresql postgresql 8.3.9 Yes
Application postgresql postgresql 8.3.10 Yes
Application postgresql postgresql 8.4 Yes
Application postgresql postgresql 8.4.1 Yes
Application postgresql postgresql 8.4.2 Yes
Application postgresql postgresql 8.4.3 Yes
Application postgresql postgresql 9.0.0 Yes

References