REDHAT-BUG-582615: Medium severity postgresql common vulnerability
A flaw was found in the way the PostgreSQL enforced permission checks on scripts written in PL/Perl. Once the PL/Perl procedural language was registered on particular database, a remote, authenticated user, privileged to create databases, running a specially-crafted PL/Perl script, could use this flaw to bypass intended PL/Perl trusted mode restrictions, allowing them to run arbitrary Perl scripts with the privileges of the database server.
References: [1] PostgreSQL PL/Perl procedural language manual page: http://www.postgresql.org/docs/8.1/interactive/plperl.html [2] PostgreSQL Trusted and Untrusted PL/Perl mode manual page: http://www.postgresql.org/docs/8.1/interactive/plperl-trusted.html
Acknowledgements:
Red Hat would like to thank Tim Bunce for responsibly reporting this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-582615?
The severity of REDHAT-BUG-582615 is considered high due to the potential for a remote, authenticated user to exploit the vulnerability.
How do I fix REDHAT-BUG-582615?
To fix REDHAT-BUG-582615, it is recommended to update PostgreSQL to the latest version where the vulnerability has been addressed.
Who is affected by REDHAT-BUG-582615?
REDHAT-BUG-582615 affects PostgreSQL installations where PL/Perl is enabled and users have privileges to create databases.
What type of attack does REDHAT-BUG-582615 enable?
REDHAT-BUG-582615 enables an authenticated remote user to execute arbitrary code through specially-crafted PL/Perl scripts.
Is REDHAT-BUG-582615 related to PL/Perl usage in PostgreSQL?
Yes, REDHAT-BUG-582615 is directly related to how PostgreSQL enforces permission checks on scripts written in the PL/Perl language.