CVEvulnerability
CVE-2010-1447
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-05-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution.
Affected configurations
• postgresql postgresql 7.4
• postgresql postgresql 7.4.1
• postgresql postgresql 7.4.2
• postgresql postgresql 7.4.3
• postgresql postgresql 7.4.4
• postgresql postgresql 7.4.5
• postgresql postgresql 7.4.6
• postgresql postgresql 7.4.7
• postgresql postgresql 7.4.8
• postgresql postgresql 7.4.9
• postgresql postgresql 7.4.10
• postgresql postgresql 7.4.11
• postgresql postgresql 7.4.12
• postgresql postgresql 7.4.13
• postgresql postgresql 7.4.14
• postgresql postgresql 7.4.15
• postgresql postgresql 7.4.16
• postgresql postgresql 7.4.17
• postgresql postgresql 7.4.18
• postgresql postgresql 7.4.19
• postgresql postgresql 7.4.20
• postgresql postgresql 7.4.21
• postgresql postgresql 7.4.22
• postgresql postgresql 7.4.23
• postgresql postgresql 7.4.24
• postgresql postgresql 7.4.25
• postgresql postgresql 7.4.26
• postgresql postgresql 7.4.27
• postgresql postgresql 7.4.28
• postgresql postgresql 8.0
• postgresql postgresql 8.0.0
• postgresql postgresql 8.0.1
• postgresql postgresql 8.0.2
• postgresql postgresql 8.0.3
• postgresql postgresql 8.0.4
• postgresql postgresql 8.0.5
• postgresql postgresql 8.0.6
• postgresql postgresql 8.0.7
• postgresql postgresql 8.0.8
• postgresql postgresql 8.0.9
• postgresql postgresql 8.0.10
• postgresql postgresql 8.0.11
• postgresql postgresql 8.0.12
• postgresql postgresql 8.0.13
• postgresql postgresql 8.0.14
• postgresql postgresql 8.0.15
• postgresql postgresql 8.0.16
• postgresql postgresql 8.0.17
• postgresql postgresql 8.0.18
• postgresql postgresql 8.0.19
• postgresql postgresql 8.0.20
• postgresql postgresql 8.0.21
• postgresql postgresql 8.0.22
• postgresql postgresql 8.0.23
• postgresql postgresql 8.0.24
• postgresql postgresql 8.1
• postgresql postgresql 8.1.0
• postgresql postgresql 8.1.1
• postgresql postgresql 8.1.2
• postgresql postgresql 8.1.3
… and 50 more
Related
Weakness · not in database (1)
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 kb.juniper.net
- http://osvdb.org/64756 osvdb.org
- http://secunia.com/advisories/39845 Vendor Advisory
- http://secunia.com/advisories/40049 secunia.com
- http://secunia.com/advisories/40052 secunia.com
- http://security-tracker.debian.org/tracker/CVE-2010-1447 security-tracker.debian.org
- http://www.debian.org/security/2011/dsa-2267 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:115 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:116 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2010/05/20/5 www.openwall.com
- http://www.postgresql.org/about/news.1203 www.postgresql.org
- http://www.redhat.com/support/errata/RHSA-2010-0457.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0458.html www.redhat.com
- http://www.securityfocus.com/bid/40305 www.securityfocus.com
- http://www.securitytracker.com/id?1023988 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/1167 Patch, Vendor Advisory
- https://bugs.launchpad.net/bugs/cve/2010-1447 bugs.launchpad.net
- https://bugzilla.redhat.com/show_bug.cgi?id=588269 bugzilla.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11530 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7320 oval.cisecurity.org
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 kb.juniper.net
- http://osvdb.org/64756 osvdb.org
- http://secunia.com/advisories/39845 Vendor Advisory
- http://secunia.com/advisories/40049 secunia.com
- http://secunia.com/advisories/40052 secunia.com
- http://security-tracker.debian.org/tracker/CVE-2010-1447 security-tracker.debian.org
- http://www.debian.org/security/2011/dsa-2267 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:115 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:116 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2010/05/20/5 www.openwall.com
- http://www.postgresql.org/about/news.1203 www.postgresql.org
- http://www.redhat.com/support/errata/RHSA-2010-0457.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0458.html www.redhat.com
- http://www.securityfocus.com/bid/40305 www.securityfocus.com
- http://www.securitytracker.com/id?1023988 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/1167 Patch, Vendor Advisory
- https://bugs.launchpad.net/bugs/cve/2010-1447 bugs.launchpad.net
- https://bugzilla.redhat.com/show_bug.cgi?id=588269 bugzilla.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11530 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7320 oval.cisecurity.org