Oval Definition:	oval:org.mitre.oval:def:10510
Revision Date: 2013-04-29 Version: 13 Title: The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script. Description: The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2010-1170 Platform(s): CentOS Linux 3 CentOS Linux 4 CentOS Linux 5 Oracle Linux 4 Oracle Linux 5 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section rh-postgresql-devel is earlier than 0:7.3.21-3 OR rh-postgresql-server is earlier than 0:7.3.21-3 OR rh-postgresql-python is earlier than 0:7.3.21-3 OR rh-postgresql-libs is earlier than 0:7.3.21-3 OR rh-postgresql-docs is earlier than 0:7.3.21-3 OR rh-postgresql-test is earlier than 0:7.3.21-3 OR rh-postgresql-pl is earlier than 0:7.3.21-3 OR rh-postgresql-tcl is earlier than 0:7.3.21-3 OR rh-postgresql is earlier than 0:7.3.21-3 OR rh-postgresql-contrib is earlier than 0:7.3.21-3 OR rh-postgresql-jdbc is earlier than 0:7.3.21-3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section postgresql is earlier than 0:7.4.29-1.el4_8.1 OR postgresql-docs is earlier than 0:7.4.29-1.el4_8.1 OR postgresql-pl is earlier than 0:7.4.29-1.el4_8.1 OR postgresql-tcl is earlier than 0:7.4.29-1.el4_8.1 OR postgresql-libs is earlier than 0:7.4.29-1.el4_8.1 OR postgresql-contrib is earlier than 0:7.4.29-1.el4_8.1 OR postgresql-python is earlier than 0:7.4.29-1.el4_8.1 OR postgresql-test is earlier than 0:7.4.29-1.el4_8.1 OR postgresql-jdbc is earlier than 0:7.4.29-1.el4_8.1 OR postgresql-server is earlier than 0:7.4.29-1.el4_8.1 OR postgresql-devel is earlier than 0:7.4.29-1.el4_8.1 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section postgresql84-server is earlier than 0:8.4.4-1.el5_5.1 OR postgresql84-plpython is earlier than 0:8.4.4-1.el5_5.1 OR postgresql84-libs is earlier than 0:8.4.4-1.el5_5.1 OR postgresql84-devel is earlier than 0:8.4.4-1.el5_5.1 OR postgresql84-python is earlier than 0:8.4.4-1.el5_5.1 OR postgresql84-plperl is earlier than 0:8.4.4-1.el5_5.1 OR postgresql-server is earlier than 0:8.1.21-1.el5_5.1 OR postgresql84-test is earlier than 0:8.4.4-1.el5_5.1 OR postgresql-devel is earlier than 0:8.1.21-1.el5_5.1 OR postgresql is earlier than 0:8.1.21-1.el5_5.1 OR postgresql84-tcl is earlier than 0:8.4.4-1.el5_5.1 OR postgresql-docs is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-pl is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-libs is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-tcl is earlier than 0:8.1.21-1.el5_5.1 OR postgresql84-pltcl is earlier than 0:8.4.4-1.el5_5.1 OR postgresql-contrib is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-python is earlier than 0:8.1.21-1.el5_5.1 OR postgresql84-contrib is earlier than 0:8.4.4-1.el5_5.1 OR postgresql-test is earlier than 0:8.1.21-1.el5_5.1 OR postgresql84-docs is earlier than 0:8.4.4-1.el5_5.1 OR postgresql84 is earlier than 0:8.4.4-1.el5_5.1
BACK