← voltar
CVE-2010-1170

CVE-2010-1170

EPSS 2.9%
The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041559.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/041579.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/041591.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlhttp://marc.info/?l=bugtraq&m=134124585221119&w=2http://osvdb.org/64757https://bugzilla.redhat.com/show_bug.cgi?id=583072http://secunia.com/advisories/39815http://secunia.com/advisories/39820http://secunia.com/advisories/39845http://secunia.com/advisories/39898http://secunia.com/advisories/39939