REDHAT-BUG-583072
First published: Fri Apr 16 2010(Updated: )
A flaw was found in the way the PostgreSQL enforced permission checks on scripts written in PL/Tcl. Once the PL/Tcl procedural language was registered on particular database, a remote, authenticated user, privileged to create databases, running a specially-crafted PL/Tcl script, could use this flaw to bypass intended PL/Tcl trusted mode restrictions, allowing them to run arbitrary Tcl scripts with the privileges of the database server. References: [1] PostgreSQL PL/Tcl procedural language manual page: <a href="http://www.postgresql.org/docs/8.1/interactive/pltcl.html">http://www.postgresql.org/docs/8.1/interactive/pltcl.html</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PostgreSQL |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.postgresql.org/docs/8.1/interactive/pltcl.html
- https://access.redhat.com/security/cve/CVE-2010-1170
- http://www.postgresql.org/support/security.html
- http://admin.fedoraproject.org/updates/postgresql-8.4.4-1.fc12
- http://admin.fedoraproject.org/updates/postgresql-8.3.11-1.fc11
- http://admin.fedoraproject.org/updates/postgresql-8.4.4-1.fc13
- http://git.postgresql.org/gitweb?p=postgresql.git;a=commitdiff;h=989b6ff11931dd742552dd3b8d51f3225ce9fb2e
- http://git.postgresql.org/gitweb?p=postgresql.git;a=commitdiff;h=09d3c3f3353c0a836935a87896097bae2d5bd81c
- http://archives.postgresql.org/pgsql-committers/2010-05/msg00221.php
- https://rhn.redhat.com/errata/RHSA-2010-0427.html
- https://rhn.redhat.com/errata/RHSA-2010-0428.html
- https://rhn.redhat.com/errata/RHSA-2010-0429.html
- https://rhn.redhat.com/errata/RHSA-2010-0430.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=636659
- https://bugzilla.redhat.com/show_bug.cgi?id=583072
- agent/type
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-1170
- agent/first-publish-date
- agent/source
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/postgresql
- canonical/postgresql