CVE-2010-1169
Last modified
CVE-2010-1169 is a vulnerability of currently unknown severity. PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.. EPSS estimates a 4.08% chance of exploitation in the next 30 days.
Description
PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Postgresql | Postgresql | 7.4 | — |
| Postgresql | Postgresql | 7.4.1 | — |
| Postgresql | Postgresql | 7.4.2 | — |
| Postgresql | Postgresql | 7.4.3 | — |
| Postgresql | Postgresql | 7.4.4 | — |
| Postgresql | Postgresql | 7.4.5 | — |
| Postgresql | Postgresql | 7.4.6 | — |
| Postgresql | Postgresql | 7.4.7 | — |
| Postgresql | Postgresql | 7.4.8 | — |
| Postgresql | Postgresql | 7.4.9 | — |
| Postgresql | Postgresql | 7.4.10 | — |
| Postgresql | Postgresql | 7.4.11 | — |
| Postgresql | Postgresql | 7.4.12 | — |
| Postgresql | Postgresql | 7.4.13 | — |
| Postgresql | Postgresql | 7.4.14 | — |
| Postgresql | Postgresql | 7.4.15 | — |
| Postgresql | Postgresql | 7.4.16 | — |
| Postgresql | Postgresql | 7.4.17 | — |
| Postgresql | Postgresql | 7.4.18 | — |
| Postgresql | Postgresql | 7.4.19 | — |
| Postgresql | Postgresql | 7.4.20 | — |
| Postgresql | Postgresql | 7.4.21 | — |
| Postgresql | Postgresql | 7.4.22 | — |
| Postgresql | Postgresql | 7.4.23 | — |
| Postgresql | Postgresql | 7.4.24 | — |
| Postgresql | Postgresql | 7.4.25 | — |
| Postgresql | Postgresql | 7.4.26 | — |
| Postgresql | Postgresql | 7.4.27 | — |
| Postgresql | Postgresql | 7.4.28 | — |
| Postgresql | Postgresql | 8.0 | — |
| Postgresql | Postgresql | 8.0.0 | — |
| Postgresql | Postgresql | 8.0.1 | — |
| Postgresql | Postgresql | 8.0.2 | — |
| Postgresql | Postgresql | 8.0.3 | — |
| Postgresql | Postgresql | 8.0.4 | — |
| Postgresql | Postgresql | 8.0.5 | — |
| Postgresql | Postgresql | 8.0.6 | — |
| Postgresql | Postgresql | 8.0.7 | — |
| Postgresql | Postgresql | 8.0.8 | — |
| Postgresql | Postgresql | 8.0.9 | — |
| Postgresql | Postgresql | 8.0.10 | — |
| Postgresql | Postgresql | 8.0.11 | — |
| Postgresql | Postgresql | 8.0.12 | — |
| Postgresql | Postgresql | 8.0.13 | — |
| Postgresql | Postgresql | 8.0.14 | — |
| Postgresql | Postgresql | 8.0.15 | — |
| Postgresql | Postgresql | 8.0.16 | — |
| Postgresql | Postgresql | 8.0.17 | — |
| Postgresql | Postgresql | 8.0.18 | — |
| Postgresql | Postgresql | 8.0.19 | — |
Showing 50 of 110 affected configurations. See NVD for the full list.
References
- http://secunia.com/advisories/39845Vendor Advisory
- http://www.vupen.com/english/advisories/2010/1167Vendor Advisory
- http://secunia.com/advisories/39845Vendor Advisory
- http://www.vupen.com/english/advisories/2010/1167Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-1169?
How severe is CVE-2010-1169?
How do I fix CVE-2010-1169?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-1163The command matching functionality in sudo 1.6.8 through 1.7…
- CVE-2010-1164Multiple cross-site scripting (XSS) vulnerabilities in Atlas…
- CVE-2010-1165Atlassian JIRA 3.12 through 4.1 allows remote authenticated …
- CVE-2010-1166The fbComposite function in fbpict.c in the Render extension…
- CVE-2010-1167fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, …
- CVE-2010-1168The Safe (aka Safe.pm) module before 2.25 for Perl allows co…
- CVE-2010-1170The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8…
- CVE-2010-1171Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a danger…
- CVE-2010-1172DBus-GLib 0.73 disregards the access flag of exported GObjec…
- CVE-2010-1173The sctp_process_unk_param function in net/sctp/sm_make_chun…
- CVE-2010-1174Cisco TFTP Server 1.1 allows remote attackers to cause a den…
- CVE-2010-1175Microsoft Internet Explorer 7.0 on Windows XP and Windows Se…
Are you affected by CVE-2010-1169?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST