CVE-2010-1170
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.9%
The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script.
Produtos afetados
n/a · n/aReferências
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041559.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/041579.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/041591.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlhttp://marc.info/?l=bugtraq&m=134124585221119&w=2http://osvdb.org/64757https://bugzilla.redhat.com/show_bug.cgi?id=583072http://secunia.com/advisories/39815http://secunia.com/advisories/39820http://secunia.com/advisories/39845http://secunia.com/advisories/39898http://secunia.com/advisories/39939