CVE-2010-1447

T

he Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution.

References
Link Resource
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://osvdb.org/64756
http://secunia.com/advisories/39845 Vendor Advisory
http://secunia.com/advisories/40049
http://secunia.com/advisories/40052
http://security-tracker.debian.org/tracker/CVE-2010-1447
http://www.debian.org/security/2011/dsa-2267
http://www.mandriva.com/security/advisories?name=MDVSA-2010:115
http://www.mandriva.com/security/advisories?name=MDVSA-2010:116
http://www.openwall.com/lists/oss-security/2010/05/20/5
http://www.postgresql.org/about/news.1203
http://www.redhat.com/support/errata/RHSA-2010-0457.html
http://www.redhat.com/support/errata/RHSA-2010-0458.html
http://www.securityfocus.com/bid/40305
http://www.securitytracker.com/id?1023988
http://www.vupen.com/english/advisories/2010/1167 Patch Vendor Advisory
https://bugs.launchpad.net/bugs/cve/2010-1447
https://bugzilla.redhat.com/show_bug.cgi?id=588269
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11530
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7320
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://osvdb.org/64756
http://secunia.com/advisories/39845 Vendor Advisory
http://secunia.com/advisories/40049
http://secunia.com/advisories/40052
http://security-tracker.debian.org/tracker/CVE-2010-1447
http://www.debian.org/security/2011/dsa-2267
http://www.mandriva.com/security/advisories?name=MDVSA-2010:115
http://www.mandriva.com/security/advisories?name=MDVSA-2010:116
http://www.openwall.com/lists/oss-security/2010/05/20/5
http://www.postgresql.org/about/news.1203
http://www.redhat.com/support/errata/RHSA-2010-0457.html
http://www.redhat.com/support/errata/RHSA-2010-0458.html
http://www.securityfocus.com/bid/40305
http://www.securitytracker.com/id?1023988
http://www.vupen.com/english/advisories/2010/1167 Patch Vendor Advisory
https://bugs.launchpad.net/bugs/cve/2010-1447
https://bugzilla.redhat.com/show_bug.cgi?id=588269
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11530
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7320
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.13:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.14:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.15:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.16:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.17:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.18:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.19:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.20:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.21:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.22:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.23:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.24:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.25:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.26:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.27:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.4.28:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.0:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.8:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.9:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.10:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.11:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.12:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.13:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.14:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.15:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.16:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.17:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.18:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.19:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.20:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.21:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.22:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.23:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.0.24:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:postgresql:postgresql:8.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.0:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.8:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.9:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.10:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.11:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.12:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.13:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.14:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.15:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.16:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.17:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.18:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.19:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.1.20:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.8:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.9:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.10:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.11:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.12:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.13:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.14:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.15:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.2.16:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:postgresql:postgresql:8.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.8:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.9:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.3.10:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:a:postgresql:postgresql:8.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.4.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.4.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:8.4.3:*:*:*:*:*:*:*

Configuration 7 (hide)

cpe:2.3:a:postgresql:postgresql:9.0.0:beta1:*:*:*:*:*:*

History

21 Nov 2024, 01:14

Type Values Removed Values Added
References () http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - () http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 -
References () http://osvdb.org/64756 - () http://osvdb.org/64756 -
References () http://secunia.com/advisories/39845 - Vendor Advisory () http://secunia.com/advisories/39845 - Vendor Advisory
References () http://secunia.com/advisories/40049 - () http://secunia.com/advisories/40049 -
References () http://secunia.com/advisories/40052 - () http://secunia.com/advisories/40052 -
References () http://security-tracker.debian.org/tracker/CVE-2010-1447 - () http://security-tracker.debian.org/tracker/CVE-2010-1447 -
References () http://www.debian.org/security/2011/dsa-2267 - () http://www.debian.org/security/2011/dsa-2267 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2010:115 - () http://www.mandriva.com/security/advisories?name=MDVSA-2010:115 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2010:116 - () http://www.mandriva.com/security/advisories?name=MDVSA-2010:116 -
References () http://www.openwall.com/lists/oss-security/2010/05/20/5 - () http://www.openwall.com/lists/oss-security/2010/05/20/5 -
References () http://www.postgresql.org/about/news.1203 - () http://www.postgresql.org/about/news.1203 -
References () http://www.redhat.com/support/errata/RHSA-2010-0457.html - () http://www.redhat.com/support/errata/RHSA-2010-0457.html -
References () http://www.redhat.com/support/errata/RHSA-2010-0458.html - () http://www.redhat.com/support/errata/RHSA-2010-0458.html -
References () http://www.securityfocus.com/bid/40305 - () http://www.securityfocus.com/bid/40305 -
References () http://www.securitytracker.com/id?1023988 - () http://www.securitytracker.com/id?1023988 -
References () http://www.vupen.com/english/advisories/2010/1167 - Patch, Vendor Advisory () http://www.vupen.com/english/advisories/2010/1167 - Patch, Vendor Advisory
References () https://bugs.launchpad.net/bugs/cve/2010-1447 - () https://bugs.launchpad.net/bugs/cve/2010-1447 -
References () https://bugzilla.redhat.com/show_bug.cgi?id=588269 - () https://bugzilla.redhat.com/show_bug.cgi?id=588269 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11530 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11530 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7320 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7320 -

Information

Published : 2010-05-19 18:30

Updated : 2025-04-11 00:51


NVD link : CVE-2010-1447

Mitre link : CVE-2010-1447

CVE.ORG link : CVE-2010-1447


JSON object : View

Products Affected
CWE
CWE-264

Permissions, Privileges, and Access Controls