Vulnerabilities > CVE-2010-3433 - Permissions, Privileges, and Access Controls vulnerability in Postgresql

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

postgresql

CWE-264

nessus

NVD

Published: 2010-10-06

Updated: 2024-11-21

Summary

The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22, 8.2 before 8.2.18, 8.3 before 8.3.12, 8.4 before 8.4.5, and 9.0 before 9.0.1 do not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain privileges via crafted script code in a SECURITY DEFINER function, as demonstrated by (1) redefining standard functions or (2) redefining operators, a different vulnerability than CVE-2010-1168, CVE-2010-1169, CVE-2010-1170, and CVE-2010-1447.

Vulnerable Configurations

Part	Description	Count
Application	Postgresql Postgresql Postgresql 7.4.16 Postgresql Postgresql 7.4.24 Postgresql Postgresql 7.4.22 Postgresql Postgresql 7.4.21 Postgresql Postgresql 7.4.19 Postgresql Postgresql 7.4.15 Postgresql Postgresql 7.4.1 Postgresql Postgresql 7.4.14 Postgresql Postgresql 7.4.26 Postgresql Postgresql 7.4.6 Postgresql Postgresql 7.4.23 Postgresql Postgresql 7.4.11 Postgresql Postgresql 7.4.7 Postgresql Postgresql 7.4.17 Postgresql Postgresql 7.4.3 Postgresql Postgresql 7.4.25 Postgresql Postgresql 7.4.9 Postgresql Postgresql 7.4.5 Postgresql Postgresql 7.4.18 Postgresql Postgresql 7.4.8 Postgresql Postgresql 7.4 Postgresql Postgresql 7.4.4 Postgresql Postgresql 7.4.28 Postgresql Postgresql 7.4.12 Postgresql Postgresql 7.4.27 Postgresql Postgresql 7.4.10 Postgresql Postgresql 7.4.29 Postgresql Postgresql 7.4.20 Postgresql Postgresql 7.4.2 Postgresql Postgresql 7.4.13 Postgresql Postgresql 8.0.7 Postgresql Postgresql 8.0.2 Postgresql Postgresql 8.0.22 Postgresql Postgresql 8.0.25 Postgresql Postgresql 8.0.17 Postgresql Postgresql 8.0.10 Postgresql Postgresql 8.0.12 Postgresql Postgresql 8.0.9 Postgresql Postgresql 8.0.15 Postgresql Postgresql 8.0.18 Postgresql Postgresql 8.0.3 Postgresql Postgresql 8.0.24 Postgresql Postgresql 8.0.20 Postgresql Postgresql 8.0.8 Postgresql Postgresql 8.0.6 Postgresql Postgresql 8.0.16 Postgresql Postgresql 8.0.13 Postgresql Postgresql 8.0.1 Postgresql Postgresql 8.0.19 Postgresql Postgresql 8.0.21 Postgresql Postgresql 8.0.23 Postgresql Postgresql 8.0.4 Postgresql Postgresql 8.0.5 Postgresql Postgresql 8.0.14 Postgresql Postgresql 8.0.11 Postgresql Postgresql 8.0 Postgresql Postgresql 8.1.10 Postgresql Postgresql 8.1.6 Postgresql Postgresql 8.1.15 Postgresql Postgresql 8.1.7 Postgresql Postgresql 8.1.20 Postgresql Postgresql 8.1 Postgresql Postgresql 8.1.19 Postgresql Postgresql 8.1.13 Postgresql Postgresql 8.1.3 Postgresql Postgresql 8.1.9 Postgresql Postgresql 8.1.14 Postgresql Postgresql 8.1.21 Postgresql Postgresql 8.1.11 Postgresql Postgresql 8.1.17 Postgresql Postgresql 8.1.18 Postgresql Postgresql 8.1.4 Postgresql Postgresql 8.1.8 Postgresql Postgresql 8.1.1 Postgresql Postgresql 8.1.12 Postgresql Postgresql 8.1.5 Postgresql Postgresql 8.1.16 Postgresql Postgresql 8.1.2 Postgresql Postgresql 8.2.9 Postgresql Postgresql 8.2.17 Postgresql Postgresql 8.2.10 Postgresql Postgresql 8.2.15 Postgresql Postgresql 8.2.4 Postgresql Postgresql 8.2.11 Postgresql Postgresql 8.2.12 Postgresql Postgresql 8.2.2 Postgresql Postgresql 8.2.5 Postgresql Postgresql 8.2.1 Postgresql Postgresql 8.2.7 Postgresql Postgresql 8.2.6 Postgresql Postgresql 8.2.3 Postgresql Postgresql 8.2.16 Postgresql Postgresql 8.2.8 Postgresql Postgresql 8.2.13 Postgresql Postgresql 8.2 Postgresql Postgresql 8.2.14 Postgresql Postgresql 8.3.6 Postgresql Postgresql 8.3.3 Postgresql Postgresql 8.3.2 Postgresql Postgresql 8.3.1 Postgresql Postgresql 8.3.5 Postgresql Postgresql 8.3.8 Postgresql Postgresql 8.3.7 Postgresql Postgresql 8.3.10 Postgresql Postgresql 8.3 Postgresql Postgresql 8.3.4 Postgresql Postgresql 8.3.11 Postgresql Postgresql 8.3.9 Postgresql Postgresql 8.4.4 Postgresql Postgresql 8.4.1 Postgresql Postgresql 8.4.3 Postgresql Postgresql 8.4 Postgresql Postgresql 8.4.2 Postgresql Postgresql 9.0	114

Common Weakness Enumeration (CWE)

CWE-264 - Permissions, Privileges, and Access Controls

Common Attack Pattern Enumeration and Classification (CAPEC)

Accessing, Modifying or Executing Executable Files
An attack of this type exploits a system's configuration that allows an attacker to either directly access an executable file, for example through shell access; or in a possible worst case allows an attacker to upload a file and then execute it. Web servers, ftp servers, and message oriented middleware systems which have many integration points are particularly vulnerable, because both the programmers and the administrators must be in synch regarding the interfaces and the correct privileges for each interface.
Leverage Executable Code in Non-Executable Files
An attack of this type exploits a system's trust in configuration and resource files, when the executable loads the resource (such as an image file or configuration file) the attacker has modified the file to either execute malicious code directly or manipulate the target process (e.g. application server) to execute based on the malicious configuration parameters. Since systems are increasingly interrelated mashing up resources from local and remote sources the possibility of this attack occurring is high. The attack can be directed at a client system, such as causing buffer overrun through loading seemingly benign image files, as in Microsoft Security Bulletin MS04-028 where specially crafted JPEG files could cause a buffer overrun once loaded into the browser. Another example targets clients reading pdf files. In this case the attacker simply appends javascript to the end of a legitimate url for a pdf (http://www.gnucitizen.org/blog/danger-danger-danger/) http://path/to/pdf/file.pdf#whatever_name_you_want=javascript:your_code_here The client assumes that they are reading a pdf, but the attacker has modified the resource and loaded executable javascript into the client's browser process. The attack can also target server processes. The attacker edits the resource or configuration file, for example a web.xml file used to configure security permissions for a J2EE app server, adding role name "public" grants all users with the public role the ability to use the administration functionality. The server trusts its configuration file to be correct, but when they are manipulated, the attacker gains full control.
Blue Boxing
This type of attack against older telephone switches and trunks has been around for decades. A tone is sent by an adversary to impersonate a supervisor signal which has the effect of rerouting or usurping command of the line. While the US infrastructure proper may not contain widespread vulnerabilities to this type of attack, many companies are connected globally through call centers and business process outsourcing. These international systems may be operated in countries which have not upgraded Telco infrastructure and so are vulnerable to Blue boxing. Blue boxing is a result of failure on the part of the system to enforce strong authorization for administrative functions. While the infrastructure is different than standard current applications like web applications, there are historical lessons to be learned to upgrade the access control for administrative functions.
Restful Privilege Elevation
Rest uses standard HTTP (Get, Put, Delete) style permissions methods, but these are not necessarily correlated generally with back end programs. Strict interpretation of HTTP get methods means that these HTTP Get services should not be used to delete information on the server, but there is no access control mechanism to back up this logic. This means that unless the services are properly ACL'd and the application's service implementation are following these guidelines then an HTTP request can easily execute a delete or update on the server side. The attacker identifies a HTTP Get URL such as http://victimsite/updateOrder, which calls out to a program to update orders on a database or other resource. The URL is not idempotent so the request can be submitted multiple times by the attacker, additionally, the attacker may be able to exploit the URL published as a Get method that actually performs updates (instead of merely retrieving data). This may result in malicious or inadvertent altering of data on the server.
Target Programs with Elevated Privileges
This attack targets programs running with elevated privileges. The attacker would try to leverage a bug in the running program and get arbitrary code to execute with elevated privileges. For instance an attacker would look for programs that write to the system directories or registry keys (such as HKLM, which stores a number of critical Windows environment variables). These programs are typically running with elevated privileges and have usually not been designed with security in mind. Such programs are excellent exploit targets because they yield lots of power when they break. The malicious user try to execute its code at the same level as a privileged system call.

Nessus

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-201110-22.NASL
description	The remote host is affected by the vulnerability described in GLSA-201110-22 (PostgreSQL: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : A remote authenticated attacker could send a specially crafted SQL query to a PostgreSQL server with the
last seen	2020-06-01
modified	2020-06-02
plugin id	56626
published	2011-10-25
reporter	This script is Copyright (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/56626
title	GLSA-201110-22 : PostgreSQL: Multiple vulnerabilities
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Gentoo Linux Security Advisory GLSA 201110-22. # # The advisory text is Copyright (C) 2001-2019 Gentoo Foundation, Inc. # and licensed under the Creative Commons - Attribution / Share Alike # license. See http://creativecommons.org/licenses/by-sa/3.0/ # include("compat.inc"); if (description) { script_id(56626); script_version("1.12"); script_cvs_date("Date: 2019/08/12 17:35:38"); script_cve_id("CVE-2009-0922", "CVE-2009-3229", "CVE-2009-3230", "CVE-2009-3231", "CVE-2009-4034", "CVE-2009-4136", "CVE-2010-0442", "CVE-2010-0733", "CVE-2010-1169", "CVE-2010-1170", "CVE-2010-1447", "CVE-2010-1975", "CVE-2010-3433", "CVE-2010-4015", "CVE-2011-2483"); script_bugtraq_id(34090, 36314, 37333, 37334, 37973, 38619, 40215, 40304, 40305, 43747, 46084, 49241); script_xref(name:"GLSA", value:"201110-22"); script_name(english:"GLSA-201110-22 : PostgreSQL: Multiple vulnerabilities"); script_summary(english:"Checks for updated package(s) in /var/db/pkg"); script_set_attribute( attribute:"synopsis", value: "The remote Gentoo host is missing one or more security-related patches." ); script_set_attribute( attribute:"description", value: "The remote host is affected by the vulnerability described in GLSA-201110-22 (PostgreSQL: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : A remote authenticated attacker could send a specially crafted SQL query to a PostgreSQL server with the 'intarray' module enabled, possibly resulting in the execution of arbitrary code with the privileges of the PostgreSQL server process, or a Denial of Service condition. Furthermore, a remote authenticated attacker could execute arbitrary Perl code, cause a Denial of Service condition via different vectors, bypass LDAP authentication, bypass X.509 certificate validation, gain database privileges, exploit weak blowfish encryption and possibly cause other unspecified impact. Workaround : There is no known workaround at this time." ); script_set_attribute( attribute:"see_also", value:"https://security.gentoo.org/glsa/201110-22" ); script_set_attribute( attribute:"solution", value: "All PostgreSQL 8.2 users should upgrade to the latest 8.2 base version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-db/postgresql-base-8.2.22:8.2' All PostgreSQL 8.3 users should upgrade to the latest 8.3 base version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-db/postgresql-base-8.3.16:8.3' All PostgreSQL 8.4 users should upgrade to the latest 8.4 base version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-db/postgresql-base-8.4.9:8.4' All PostgreSQL 9.0 users should upgrade to the latest 9.0 base version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-db/postgresql-base-9.0.5:9.0' All PostgreSQL 8.2 server users should upgrade to the latest 8.2 server version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-db/postgresql-server-8.2.22:8.2' All PostgreSQL 8.3 server users should upgrade to the latest 8.3 server version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-db/postgresql-server-8.3.16:8.3' All PostgreSQL 8.4 server users should upgrade to the latest 8.4 server version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-db/postgresql-server-8.4.9:8.4' All PostgreSQL 9.0 server users should upgrade to the latest 9.0 server version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-db/postgresql-server-9.0.5:9.0' The old unsplit PostgreSQL packages have been removed from portage. Users still using them are urged to migrate to the new PostgreSQL packages as stated above and to remove the old package: # emerge --unmerge 'dev-db/postgresql'" ); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_cwe_id(189, 264, 287, 310, 399); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:gentoo:linux:postgresql"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:gentoo:linux:postgresql-base"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:gentoo:linux:postgresql-server"); script_set_attribute(attribute:"cpe", value:"cpe:/o:gentoo:linux"); script_set_attribute(attribute:"vuln_publication_date", value:"2009/03/17"); script_set_attribute(attribute:"patch_publication_date", value:"2011/10/25"); script_set_attribute(attribute:"plugin_publication_date", value:"2011/10/25"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Gentoo Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Gentoo/release", "Host/Gentoo/qpkg-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("qpkg.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Gentoo/release")) audit(AUDIT_OS_NOT, "Gentoo"); if (!get_kb_item("Host/Gentoo/qpkg-list")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (qpkg_check(package:"dev-db/postgresql-server", unaffected:make_list("ge 9.0.5", "rge 8.4.9", "rge 8.3.16", "rge 8.2.22", "rge 8.4.10", "rge 8.3.17", "rge 8.2.23", "ge 8.4.11", "ge 8.3.18"), vulnerable:make_list("lt 9.0.5"))) flag++; if (qpkg_check(package:"dev-db/postgresql", unaffected:make_list(), vulnerable:make_list("le 9"))) flag++; if (qpkg_check(package:"dev-db/postgresql-base", unaffected:make_list("ge 9.0.5", "rge 8.4.9", "rge 8.3.16", "rge 8.2.22", "rge 8.4.10", "rge 8.3.17", "rge 8.2.23", "ge 8.4.11", "ge 8.3.18"), vulnerable:make_list("lt 9.0.5"))) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:qpkg_report_get()); else security_hole(0); exit(0); } else { tested = qpkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "PostgreSQL"); }

NASL family	Oracle Linux Local Security Checks
NASL id	ORACLELINUX_ELSA-2010-0742.NASL
description	From Red Hat Security Advisory 2010:0742 : Updated postgresql and postgresql84 packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. PostgreSQL is an advanced object-relational database management system (DBMS). PL/Perl and PL/Tcl allow users to write PostgreSQL functions in the Perl and Tcl languages. The PostgreSQL SECURITY DEFINER parameter, which can be used when creating a new PostgreSQL function, specifies that the function will be executed with the privileges of the user that created it. It was discovered that a user could utilize the features of the PL/Perl and PL/Tcl languages to modify the behavior of a SECURITY DEFINER function created by a different user. If the PL/Perl or PL/Tcl language was used to implement a SECURITY DEFINER function, an authenticated database user could use a PL/Perl or PL/Tcl script to modify the behavior of that function during subsequent calls in the same session. This would result in the modified or injected code also being executed with the privileges of the user who created the SECURITY DEFINER function, possibly leading to privilege escalation. (CVE-2010-3433) For Red Hat Enterprise Linux 4, the updated postgresql packages upgrade PostgreSQL to version 7.4.30. Refer to the PostgreSQL Release Notes for a list of changes : http://www.postgresql.org/docs/7.4/static/release.html For Red Hat Enterprise Linux 5, the updated postgresql packages upgrade PostgreSQL to version 8.1.22, and the updated postgresql84 packages upgrade PostgreSQL to version 8.4.5. Refer to the PostgreSQL Release Notes for a list of changes : http://www.postgresql.org/docs/8.1/static/release.html http://www.postgresql.org/docs/8.4/static/release.html All PostgreSQL users are advised to upgrade to these updated packages, which correct this issue. If the postgresql service is running, it will be automatically restarted after installing this update.
last seen	2020-06-01
modified	2020-06-02
plugin id	68109
published	2013-07-12
reporter	This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/68109
title	Oracle Linux 4 / 5 : postgresql / postgresql84 (ELSA-2010-0742)
code	#%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2010:0742 and # Oracle Linux Security Advisory ELSA-2010-0742 respectively. # include("compat.inc"); if (description) { script_id(68109); script_version("1.9"); script_cvs_date("Date: 2019/10/25 13:36:08"); script_cve_id("CVE-2010-3433"); script_bugtraq_id(43747); script_xref(name:"RHSA", value:"2010:0742"); script_name(english:"Oracle Linux 4 / 5 : postgresql / postgresql84 (ELSA-2010-0742)"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value:"The remote Oracle Linux host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "From Red Hat Security Advisory 2010:0742 : Updated postgresql and postgresql84 packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. PostgreSQL is an advanced object-relational database management system (DBMS). PL/Perl and PL/Tcl allow users to write PostgreSQL functions in the Perl and Tcl languages. The PostgreSQL SECURITY DEFINER parameter, which can be used when creating a new PostgreSQL function, specifies that the function will be executed with the privileges of the user that created it. It was discovered that a user could utilize the features of the PL/Perl and PL/Tcl languages to modify the behavior of a SECURITY DEFINER function created by a different user. If the PL/Perl or PL/Tcl language was used to implement a SECURITY DEFINER function, an authenticated database user could use a PL/Perl or PL/Tcl script to modify the behavior of that function during subsequent calls in the same session. This would result in the modified or injected code also being executed with the privileges of the user who created the SECURITY DEFINER function, possibly leading to privilege escalation. (CVE-2010-3433) For Red Hat Enterprise Linux 4, the updated postgresql packages upgrade PostgreSQL to version 7.4.30. Refer to the PostgreSQL Release Notes for a list of changes : http://www.postgresql.org/docs/7.4/static/release.html For Red Hat Enterprise Linux 5, the updated postgresql packages upgrade PostgreSQL to version 8.1.22, and the updated postgresql84 packages upgrade PostgreSQL to version 8.4.5. Refer to the PostgreSQL Release Notes for a list of changes : http://www.postgresql.org/docs/8.1/static/release.html http://www.postgresql.org/docs/8.4/static/release.html All PostgreSQL users are advised to upgrade to these updated packages, which correct this issue. If the postgresql service is running, it will be automatically restarted after installing this update." ); script_set_attribute( attribute:"see_also", value:"https://oss.oracle.com/pipermail/el-errata/2010-October/001674.html" ); script_set_attribute( attribute:"see_also", value:"https://oss.oracle.com/pipermail/el-errata/2010-October/001675.html" ); script_set_attribute( attribute:"solution", value:"Update the affected postgresql and / or postgresql84 packages." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql-contrib"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql-docs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql-jdbc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql-libs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql-python"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql-server"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql-tcl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql-test"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84-contrib"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84-docs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84-libs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84-plperl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84-plpython"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84-pltcl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84-python"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84-server"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84-tcl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:postgresql84-test"); script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:4"); script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:5"); script_set_attribute(attribute:"vuln_publication_date", value:"2010/10/06"); script_set_attribute(attribute:"patch_publication_date", value:"2010/10/06"); script_set_attribute(attribute:"plugin_publication_date", value:"2013/07/12"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Oracle Linux Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/OracleLinux")) audit(AUDIT_OS_NOT, "Oracle Linux"); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| !pregmatch(pattern: "Oracle (?:Linux Server\|Enterprise Linux)", string:release)) audit(AUDIT_OS_NOT, "Oracle Linux"); os_ver = pregmatch(pattern: "Oracle (?:Linux Server\|Enterprise Linux) .*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Oracle Linux"); os_ver = os_ver[1]; if (! preg(pattern:"^(4\|5)([^0-9]\|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Oracle Linux 4 / 5", "Oracle Linux " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && "ia64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Oracle Linux", cpu); flag = 0; if (rpm_check(release:"EL4", reference:"postgresql-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"EL4", reference:"postgresql-contrib-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"EL4", reference:"postgresql-devel-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"EL4", reference:"postgresql-docs-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"EL4", reference:"postgresql-jdbc-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"EL4", reference:"postgresql-libs-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"EL4", reference:"postgresql-pl-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"EL4", reference:"postgresql-python-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"EL4", reference:"postgresql-server-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"EL4", reference:"postgresql-tcl-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"EL4", reference:"postgresql-test-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql-contrib-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql-devel-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql-docs-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql-libs-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql-pl-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql-python-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql-server-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql-tcl-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql-test-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-contrib-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-devel-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-docs-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-libs-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-plperl-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-plpython-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-pltcl-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-python-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-server-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-tcl-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"EL5", reference:"postgresql84-test-8.4.5-1.el5_5.1")) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get()); else security_warning(0); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "postgresql / postgresql-contrib / postgresql-devel / etc"); }

NASL family	Scientific Linux Local Security Checks
NASL id	SL_20101123_POSTGRESQL_ON_SL6_X.NASL
description	It was discovered that a user could utilize the features of the PL/Perl andaPL/Tcl languages to modify the behavior of a SECURITY DEFINER functionacreated by a different user. If the PL/Perl or PL/Tcl language was used toaimplement a SECURITY DEFINER function, an authenticated database user couldause a PL/Perl or PL/Tcl script to modify the behavior of that functionaduring subsequent calls in the same session. This would result in theamodified or injected code also being executed with the privileges of theauser who created the SECURITY DEFINER function, possibly leading to privilege escalation. (CVE-2010-3433) These updated postgresql packages upgrade PostgreSQL to version 8.4.5. Refer to the PostgreSQL Release Notes for a list of changes : http://www.postgresql.org/docs/8.4/static/release.html If the postgresql service is running, it will be automatically restarted after installing this update.
last seen	2020-06-01
modified	2020-06-02
plugin id	60906
published	2012-08-01
reporter	This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/60906
title	Scientific Linux Security Update : postgresql on SL6.x i386/x86_64
code	#%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text is (C) Scientific Linux. # include("compat.inc"); if (description) { script_id(60906); script_version("1.5"); script_cvs_date("Date: 2019/10/25 13:36:19"); script_cve_id("CVE-2010-3433"); script_name(english:"Scientific Linux Security Update : postgresql on SL6.x i386/x86_64"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value: "The remote Scientific Linux host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "It was discovered that a user could utilize the features of the PL/Perl andaPL/Tcl languages to modify the behavior of a SECURITY DEFINER functionacreated by a different user. If the PL/Perl or PL/Tcl language was used toaimplement a SECURITY DEFINER function, an authenticated database user couldause a PL/Perl or PL/Tcl script to modify the behavior of that functionaduring subsequent calls in the same session. This would result in theamodified or injected code also being executed with the privileges of theauser who created the SECURITY DEFINER function, possibly leading to privilege escalation. (CVE-2010-3433) These updated postgresql packages upgrade PostgreSQL to version 8.4.5. Refer to the PostgreSQL Release Notes for a list of changes : http://www.postgresql.org/docs/8.4/static/release.html If the postgresql service is running, it will be automatically restarted after installing this update." ); # http://www.postgresql.org/docs/8.4/static/release.html script_set_attribute( attribute:"see_also", value:"https://www.postgresql.org/docs/8.4/release.html" ); # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1103&L=scientific-linux-errata&T=0&P=3318 script_set_attribute( attribute:"see_also", value:"http://www.nessus.org/u?e3b688c8" ); script_set_attribute(attribute:"solution", value:"Update the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"x-cpe:/o:fermilab:scientific_linux"); script_set_attribute(attribute:"patch_publication_date", value:"2010/11/23"); script_set_attribute(attribute:"plugin_publication_date", value:"2012/08/01"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Scientific Linux Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/RedHat/release", "Host/RedHat/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| "Scientific Linux " >!< release) audit(AUDIT_HOST_NOT, "running Scientific Linux"); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Scientific Linux", cpu); flag = 0; if (rpm_check(release:"SL6", reference:"postgresql-8.4.5-1.el6_0.2")) flag++; if (rpm_check(release:"SL6", reference:"postgresql-contrib-8.4.5-1.el6_0.2")) flag++; if (rpm_check(release:"SL6", reference:"postgresql-devel-8.4.5-1.el6_0.2")) flag++; if (rpm_check(release:"SL6", reference:"postgresql-docs-8.4.5-1.el6_0.2")) flag++; if (rpm_check(release:"SL6", reference:"postgresql-libs-8.4.5-1.el6_0.2")) flag++; if (rpm_check(release:"SL6", reference:"postgresql-plperl-8.4.5-1.el6_0.2")) flag++; if (rpm_check(release:"SL6", reference:"postgresql-plpython-8.4.5-1.el6_0.2")) flag++; if (rpm_check(release:"SL6", reference:"postgresql-pltcl-8.4.5-1.el6_0.2")) flag++; if (rpm_check(release:"SL6", reference:"postgresql-server-8.4.5-1.el6_0.2")) flag++; if (rpm_check(release:"SL6", reference:"postgresql-test-8.4.5-1.el6_0.2")) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get()); else security_warning(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");

NASL family	Ubuntu Local Security Checks
NASL id	UBUNTU_USN-1002-2.NASL
description	USN-1002-1 fixed vulnerabilities in PostgreSQL. This update provides the corresponding update for Ubuntu 10.10. It was discovered that PostgreSQL did not properly enforce permissions within sessions when PL/Perl and PL/Tcl functions or operators were redefined. A remote authenticated attacker could exploit this to execute arbitrary code with permissions of a different user, possibly leading to privilege escalation. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	49804
published	2010-10-08
reporter	Ubuntu Security Notice (C) 2010-2019 Canonical, Inc. / NASL script (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/49804
title	Ubuntu 10.10 : postgresql-8.4 vulnerability (USN-1002-2)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Ubuntu Security Notice USN-1002-2. The text # itself is copyright (C) Canonical, Inc. See # <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered # trademark of Canonical, Inc. # include("compat.inc"); if (description) { script_id(49804); script_version("1.9"); script_cvs_date("Date: 2019/09/19 12:54:26"); script_cve_id("CVE-2010-3433"); script_bugtraq_id(43747); script_xref(name:"USN", value:"1002-2"); script_name(english:"Ubuntu 10.10 : postgresql-8.4 vulnerability (USN-1002-2)"); script_summary(english:"Checks dpkg output for updated packages."); script_set_attribute( attribute:"synopsis", value: "The remote Ubuntu host is missing one or more security-related patches." ); script_set_attribute( attribute:"description", value: "USN-1002-1 fixed vulnerabilities in PostgreSQL. This update provides the corresponding update for Ubuntu 10.10. It was discovered that PostgreSQL did not properly enforce permissions within sessions when PL/Perl and PL/Tcl functions or operators were redefined. A remote authenticated attacker could exploit this to execute arbitrary code with permissions of a different user, possibly leading to privilege escalation. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues." ); script_set_attribute( attribute:"see_also", value:"https://usn.ubuntu.com/1002-2/" ); script_set_attribute(attribute:"solution", value:"Update the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libecpg-compat3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libecpg-dev"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libecpg6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpgtypes3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpq-dev"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpq5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql-8.4"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql-client"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql-client-8.4"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql-contrib"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql-contrib-8.4"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql-doc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql-doc-8.4"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql-plperl-8.4"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql-plpython-8.4"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql-pltcl-8.4"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:postgresql-server-dev-8.4"); script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:10.10"); script_set_attribute(attribute:"vuln_publication_date", value:"2010/10/06"); script_set_attribute(attribute:"patch_publication_date", value:"2010/10/07"); script_set_attribute(attribute:"plugin_publication_date", value:"2010/10/08"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"Ubuntu Security Notice (C) 2010-2019 Canonical, Inc. / NASL script (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Ubuntu Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l"); exit(0); } include("audit.inc"); include("ubuntu.inc"); include("misc_func.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/Ubuntu/release"); if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu"); release = chomp(release); if (! preg(pattern:"^(10\.10)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 10.10", "Ubuntu " + release); if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu); flag = 0; if (ubuntu_check(osver:"10.10", pkgname:"libecpg-compat3", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"libecpg-dev", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"libecpg6", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"libpgtypes3", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"libpq-dev", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"libpq5", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql-8.4", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql-client", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql-client-8.4", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql-contrib", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql-contrib-8.4", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql-doc", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql-doc-8.4", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql-plperl-8.4", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql-plpython-8.4", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql-pltcl-8.4", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (ubuntu_check(osver:"10.10", pkgname:"postgresql-server-dev-8.4", pkgver:"8.4.5-0ubuntu10.10")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : ubuntu_report_get() ); exit(0); } else { tested = ubuntu_pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libecpg-compat3 / libecpg-dev / libecpg6 / libpgtypes3 / libpq-dev / etc"); }

NASL family	Scientific Linux Local Security Checks
NASL id	SL_20101006_POSTGRESQL_AND_POSTGRESQL84_ON_SL4_X.NASL
description	It was discovered that a user could utilize the features of the PL/Perl and PL/Tcl languages to modify the behavior of a SECURITY DEFINER function created by a different user. If the PL/Perl or PL/Tcl language was used to implement a SECURITY DEFINER function, an authenticated database user could use a PL/Perl or PL/Tcl script to modify the behavior of that function during subsequent calls in the same session. This would result in the modified or injected code also being executed with the privileges of the user who created the SECURITY DEFINER function, possibly leading to privilege escalation. (CVE-2010-3433) For Scientific Linux 4, the updated postgresql packages upgrade PostgreSQL to version 7.4.30. For Scientific Linux 5, the updated postgresql packages upgrade PostgreSQL to version 8.1.22, and the updated postgresql84 packages upgrade PostgreSQL to version 8.4.5. If the postgresql service is running, it will be automatically restarted after installing this update.
last seen	2020-06-01
modified	2020-06-02
plugin id	60862
published	2012-08-01
reporter	This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/60862
title	Scientific Linux Security Update : postgresql and postgresql84 on SL4.x, SL5.x i386/x86_64
code	#%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text is (C) Scientific Linux. # include("compat.inc"); if (description) { script_id(60862); script_version("1.4"); script_cvs_date("Date: 2019/10/25 13:36:19"); script_cve_id("CVE-2010-3433"); script_name(english:"Scientific Linux Security Update : postgresql and postgresql84 on SL4.x, SL5.x i386/x86_64"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value: "The remote Scientific Linux host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "It was discovered that a user could utilize the features of the PL/Perl and PL/Tcl languages to modify the behavior of a SECURITY DEFINER function created by a different user. If the PL/Perl or PL/Tcl language was used to implement a SECURITY DEFINER function, an authenticated database user could use a PL/Perl or PL/Tcl script to modify the behavior of that function during subsequent calls in the same session. This would result in the modified or injected code also being executed with the privileges of the user who created the SECURITY DEFINER function, possibly leading to privilege escalation. (CVE-2010-3433) For Scientific Linux 4, the updated postgresql packages upgrade PostgreSQL to version 7.4.30. For Scientific Linux 5, the updated postgresql packages upgrade PostgreSQL to version 8.1.22, and the updated postgresql84 packages upgrade PostgreSQL to version 8.4.5. If the postgresql service is running, it will be automatically restarted after installing this update." ); # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1010&L=scientific-linux-errata&T=0&P=414 script_set_attribute( attribute:"see_also", value:"http://www.nessus.org/u?80c94fb9" ); script_set_attribute(attribute:"solution", value:"Update the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"x-cpe:/o:fermilab:scientific_linux"); script_set_attribute(attribute:"patch_publication_date", value:"2010/10/06"); script_set_attribute(attribute:"plugin_publication_date", value:"2012/08/01"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Scientific Linux Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/RedHat/release", "Host/RedHat/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| "Scientific Linux " >!< release) audit(AUDIT_HOST_NOT, "running Scientific Linux"); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Scientific Linux", cpu); flag = 0; if (rpm_check(release:"SL4", reference:"postgresql-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"SL4", reference:"postgresql-contrib-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"SL4", reference:"postgresql-devel-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"SL4", reference:"postgresql-docs-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"SL4", reference:"postgresql-jdbc-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"SL4", reference:"postgresql-libs-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"SL4", reference:"postgresql-pl-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"SL4", reference:"postgresql-python-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"SL4", reference:"postgresql-server-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"SL4", reference:"postgresql-tcl-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"SL4", reference:"postgresql-test-7.4.30-1.el4_8.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql-contrib-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql-devel-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql-docs-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql-libs-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql-pl-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql-python-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql-server-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql-tcl-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql-test-8.1.22-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-contrib-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-devel-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-docs-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-libs-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-plperl-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-plpython-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-pltcl-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-python-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-server-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-tcl-8.4.5-1.el5_5.1")) flag++; if (rpm_check(release:"SL5", reference:"postgresql84-test-8.4.5-1.el5_5.1")) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get()); else security_warning(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");

NASL family	Mandriva Local Security Checks
NASL id	MANDRIVA_MDVSA-2010-197.NASL
description	Multiple vulnerabilities was discovered and corrected in postgresql : An authenticated database user can manipulate modules and tied variables in some external procedural languages to execute code with enhanced privileges (CVE-2010-3433). Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/product_info.php?cPath=149&products_id=4 90 This update provides a solution to these vulnerabilities.
last seen	2020-06-01
modified	2020-06-02
plugin id	49784
published	2010-10-07
reporter	This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/49784
title	Mandriva Linux Security Advisory : postgresql (MDVSA-2010:197)
code	#%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Mandriva Linux Security Advisory MDVSA-2010:197. # The text itself is copyright (C) Mandriva S.A. # include("compat.inc"); if (description) { script_id(49784); script_version("1.12"); script_cvs_date("Date: 2019/08/02 13:32:53"); script_cve_id("CVE-2010-3433"); script_bugtraq_id(43747); script_xref(name:"MDVSA", value:"2010:197"); script_name(english:"Mandriva Linux Security Advisory : postgresql (MDVSA-2010:197)"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value: "The remote Mandriva Linux host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "Multiple vulnerabilities was discovered and corrected in postgresql : An authenticated database user can manipulate modules and tied variables in some external procedural languages to execute code with enhanced privileges (CVE-2010-3433). Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/product_info.php?cPath=149&products_id=4 90 This update provides a solution to these vulnerabilities." ); script_set_attribute(attribute:"solution", value:"Update the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64ecpg-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64ecpg5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64ecpg8.3_6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64ecpg8.4_6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64pq-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64pq5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64pq8.3_5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64pq8.4_5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libecpg-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libecpg5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libecpg8.3_6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libecpg8.4_6"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libpq-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libpq5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libpq8.3_5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libpq8.4_5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.2-contrib"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.2-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.2-docs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.2-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.2-plperl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.2-plpgsql"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.2-plpython"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.2-pltcl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.2-server"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.2-test"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.3-contrib"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.3-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.3-docs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.3-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.3-plperl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.3-plpgsql"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.3-plpython"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.3-pltcl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.3-server"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.4"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.4-contrib"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.4-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.4-docs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.4-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.4-plperl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.4-plpgsql"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.4-plpython"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.4-pltcl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:postgresql8.4-server"); script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2008.0"); script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2009.0"); script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2009.1"); script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2010.0"); script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2010.1"); script_set_attribute(attribute:"patch_publication_date", value:"2010/10/06"); script_set_attribute(attribute:"plugin_publication_date", value:"2010/10/07"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2010-2019 Tenable Network Security, Inc."); script_family(english:"Mandriva Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/Mandrake/release", "Host/Mandrake/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Mandrake/release")) audit(AUDIT_OS_NOT, "Mandriva / Mandake Linux"); if (!get_kb_item("Host/Mandrake/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if (cpu !~ "^(amd64\|i[3-6]86\|x86_64)$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Mandriva / Mandrake Linux", cpu); flag = 0; if (rpm_check(release:"MDK2008.0", cpu:"x86_64", reference:"lib64ecpg-devel-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", cpu:"x86_64", reference:"lib64ecpg5-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", cpu:"x86_64", reference:"lib64pq-devel-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", cpu:"x86_64", reference:"lib64pq5-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", cpu:"i386", reference:"libecpg-devel-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", cpu:"i386", reference:"libecpg5-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", cpu:"i386", reference:"libpq-devel-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", cpu:"i386", reference:"libpq5-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql-devel-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql8.2-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql8.2-contrib-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql8.2-devel-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql8.2-docs-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql8.2-pl-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql8.2-plperl-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql8.2-plpgsql-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql8.2-plpython-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql8.2-pltcl-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql8.2-server-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2008.0", reference:"postgresql8.2-test-8.2.18-0.1mdv2008.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", cpu:"x86_64", reference:"lib64ecpg8.3_6-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", cpu:"x86_64", reference:"lib64pq8.3_5-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", cpu:"i386", reference:"libecpg8.3_6-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", cpu:"i386", reference:"libpq8.3_5-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", reference:"postgresql8.3-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", reference:"postgresql8.3-contrib-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", reference:"postgresql8.3-devel-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", reference:"postgresql8.3-docs-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", reference:"postgresql8.3-pl-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", reference:"postgresql8.3-plperl-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", reference:"postgresql8.3-plpgsql-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", reference:"postgresql8.3-plpython-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", reference:"postgresql8.3-pltcl-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.0", reference:"postgresql8.3-server-8.3.12-0.1mdv2009.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", cpu:"x86_64", reference:"lib64ecpg8.3_6-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", cpu:"x86_64", reference:"lib64pq8.3_5-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", cpu:"i386", reference:"libecpg8.3_6-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", cpu:"i386", reference:"libpq8.3_5-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", reference:"postgresql8.3-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", reference:"postgresql8.3-contrib-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", reference:"postgresql8.3-devel-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", reference:"postgresql8.3-docs-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", reference:"postgresql8.3-pl-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", reference:"postgresql8.3-plperl-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", reference:"postgresql8.3-plpgsql-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", reference:"postgresql8.3-plpython-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", reference:"postgresql8.3-pltcl-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2009.1", reference:"postgresql8.3-server-8.3.12-0.1mdv2009.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", cpu:"x86_64", reference:"lib64ecpg8.4_6-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", cpu:"x86_64", reference:"lib64pq8.4_5-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", cpu:"i386", reference:"libecpg8.4_6-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", cpu:"i386", reference:"libpq8.4_5-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", reference:"postgresql8.4-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", reference:"postgresql8.4-contrib-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", reference:"postgresql8.4-devel-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", reference:"postgresql8.4-docs-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", reference:"postgresql8.4-pl-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", reference:"postgresql8.4-plperl-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", reference:"postgresql8.4-plpgsql-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", reference:"postgresql8.4-plpython-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", reference:"postgresql8.4-pltcl-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", reference:"postgresql8.4-server-8.4.5-0.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", cpu:"x86_64", reference:"lib64ecpg8.4_6-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", cpu:"x86_64", reference:"lib64pq8.4_5-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", cpu:"i386", reference:"libecpg8.4_6-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", cpu:"i386", reference:"libpq8.4_5-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", reference:"postgresql8.4-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", reference:"postgresql8.4-contrib-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", reference:"postgresql8.4-devel-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", reference:"postgresql8.4-docs-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", reference:"postgresql8.4-pl-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", reference:"postgresql8.4-plperl-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", reference:"postgresql8.4-plpgsql-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", reference:"postgresql8.4-plpython-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", reference:"postgresql8.4-pltcl-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", reference:"postgresql8.4-server-8.4.5-0.1mdv2010.1", yank:"mdv")) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get()); else security_warning(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2010-15870.NASL
description	Upgrade base version to v9.0.1 which contains various bug and security fixes. - http://www.postgresql.org/docs/9.0/static/release-9-0.ht ml - http://www.postgresql.org/docs/9.0/static/release-9-0- 1.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	50390
published	2010-10-29
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/50390
title	Fedora 14 : sepostgresql-9.0.1-20101007.fc14 (2010-15870)

NASL family	Debian Local Security Checks
NASL id	DEBIAN_DSA-2120.NASL
description	Tim Bunce discovered that PostgreSQL, a database server software, does not properly separate interpreters for server-side stored procedures which run in different security contexts. As a result, non-privileged authenticated database users might gain additional privileges. Note that this security update may impact intended communication through global variables between stored procedures. It might be necessary to convert these functions to run under the plperlu or pltclu languages, with database superuser privileges. This security update also includes unrelated bug fixes from PostgreSQL 8.3.12.
last seen	2020-06-01
modified	2020-06-02
plugin id	49966
published	2010-10-14
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/49966
title	Debian DSA-2120-1 : postgresql-8.3 - privilege escalation

NASL family	CentOS Local Security Checks
NASL id	CENTOS_RHSA-2010-0742.NASL
description	Updated postgresql and postgresql84 packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. PostgreSQL is an advanced object-relational database management system (DBMS). PL/Perl and PL/Tcl allow users to write PostgreSQL functions in the Perl and Tcl languages. The PostgreSQL SECURITY DEFINER parameter, which can be used when creating a new PostgreSQL function, specifies that the function will be executed with the privileges of the user that created it. It was discovered that a user could utilize the features of the PL/Perl and PL/Tcl languages to modify the behavior of a SECURITY DEFINER function created by a different user. If the PL/Perl or PL/Tcl language was used to implement a SECURITY DEFINER function, an authenticated database user could use a PL/Perl or PL/Tcl script to modify the behavior of that function during subsequent calls in the same session. This would result in the modified or injected code also being executed with the privileges of the user who created the SECURITY DEFINER function, possibly leading to privilege escalation. (CVE-2010-3433) For Red Hat Enterprise Linux 4, the updated postgresql packages upgrade PostgreSQL to version 7.4.30. Refer to the PostgreSQL Release Notes for a list of changes : http://www.postgresql.org/docs/7.4/static/release.html For Red Hat Enterprise Linux 5, the updated postgresql packages upgrade PostgreSQL to version 8.1.22, and the updated postgresql84 packages upgrade PostgreSQL to version 8.4.5. Refer to the PostgreSQL Release Notes for a list of changes : http://www.postgresql.org/docs/8.1/static/release.html http://www.postgresql.org/docs/8.4/static/release.html All PostgreSQL users are advised to upgrade to these updated packages, which correct this issue. If the postgresql service is running, it will be automatically restarted after installing this update.
last seen	2020-06-01
modified	2020-06-02
plugin id	49781
published	2010-10-07
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/49781
title	CentOS 4 / 5 : postgresql / postgresql84 (CESA-2010:0742)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_1_POSTGRESQL-101012.NASL
description	PostgreSQL functions implemented in Perl or TCL shared a global state even across different user user ids. A user could therefore influence functions of other users in an unexpected or even malicious way (CVE-2010-3433).
last seen	2020-06-01
modified	2020-06-02
plugin id	50370
published	2010-10-28
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/50370
title	openSUSE Security Update : postgresql (openSUSE-SU-2010:0903-1)

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2010-16004.NASL
description	Upgrade base version to v9.0.1 which contains various bug and security fixes. - http://www.postgresql.org/docs/9.0/static/release-9-0.ht ml - http://www.postgresql.org/docs/9.0/static/release-9-0- 1.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	50355
published	2010-10-28
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/50355
title	Fedora 13 : sepostgresql-9.0.1-20101007.fc13 (2010-16004)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2010-0742.NASL
description	Updated postgresql and postgresql84 packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. PostgreSQL is an advanced object-relational database management system (DBMS). PL/Perl and PL/Tcl allow users to write PostgreSQL functions in the Perl and Tcl languages. The PostgreSQL SECURITY DEFINER parameter, which can be used when creating a new PostgreSQL function, specifies that the function will be executed with the privileges of the user that created it. It was discovered that a user could utilize the features of the PL/Perl and PL/Tcl languages to modify the behavior of a SECURITY DEFINER function created by a different user. If the PL/Perl or PL/Tcl language was used to implement a SECURITY DEFINER function, an authenticated database user could use a PL/Perl or PL/Tcl script to modify the behavior of that function during subsequent calls in the same session. This would result in the modified or injected code also being executed with the privileges of the user who created the SECURITY DEFINER function, possibly leading to privilege escalation. (CVE-2010-3433) For Red Hat Enterprise Linux 4, the updated postgresql packages upgrade PostgreSQL to version 7.4.30. Refer to the PostgreSQL Release Notes for a list of changes : http://www.postgresql.org/docs/7.4/static/release.html For Red Hat Enterprise Linux 5, the updated postgresql packages upgrade PostgreSQL to version 8.1.22, and the updated postgresql84 packages upgrade PostgreSQL to version 8.4.5. Refer to the PostgreSQL Release Notes for a list of changes : http://www.postgresql.org/docs/8.1/static/release.html http://www.postgresql.org/docs/8.4/static/release.html All PostgreSQL users are advised to upgrade to these updated packages, which correct this issue. If the postgresql service is running, it will be automatically restarted after installing this update.
last seen	2020-06-01
modified	2020-06-02
plugin id	49785
published	2010-10-07
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/49785
title	RHEL 4 / 5 : postgresql and postgresql84 (RHSA-2010:0742)

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2010-15852.NASL
description	Update to PostgreSQL 8.4.5, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-5.html including the fix for CVE-2010-3433 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	50004
published	2010-10-18
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/50004
title	Fedora 14 : postgresql-8.4.5-1.fc14 (2010-15852)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_3_POSTGRESQL-101019.NASL
description	PostgreSQL functions implemented in Perl or TCL shared a global state even across different user user ids. A user could therefore influence functions of other users in an unexpected or even malicious way (CVE-2010-3433).
last seen	2020-06-01
modified	2020-06-02
plugin id	75712
published	2014-06-13
reporter	This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/75712
title	openSUSE Security Update : postgresql (openSUSE-SU-2010:0903-1)

NASL family	Ubuntu Local Security Checks
NASL id	UBUNTU_USN-1002-1.NASL
description	It was discovered that PostgreSQL did not properly enforce permissions within sessions when PL/Perl and PL/Tcl functions or operators were redefined. A remote authenticated attacker could exploit this to execute arbitrary code with permissions of a different user, possibly leading to privilege escalation. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	49803
published	2010-10-08
reporter	Ubuntu Security Notice (C) 2010-2019 Canonical, Inc. / NASL script (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/49803
title	Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : postgresql-8.1, postgresql-8.3, postgresql-8.4 vulnerability (USN-1002-1)

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2010-15960.NASL
description	Update to PostgreSQL 8.4.5, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-5.html including the fix for CVE-2010-3433 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	50031
published	2010-10-20
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/50031
title	Fedora 13 : postgresql-8.4.5-1.fc13 (2010-15960)

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2010-15954.NASL
description	Update to PostgreSQL 8.4.5, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-5.html including the fix for CVE-2010-3433 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	50029
published	2010-10-20
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/50029
title	Fedora 12 : postgresql-8.4.5-1.fc12 (2010-15954)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2010-0908.NASL
description	Updated postgresql packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. PostgreSQL is an advanced object-relational database management system (DBMS). PL/Perl and PL/Tcl allow users to write PostgreSQL functions in the Perl and Tcl languages. The PostgreSQL SECURITY DEFINER parameter, which can be used when creating a new PostgreSQL function, specifies that the function will be executed with the privileges of the user that created it. It was discovered that a user could utilize the features of the PL/Perl and PL/Tcl languages to modify the behavior of a SECURITY DEFINER function created by a different user. If the PL/Perl or PL/Tcl language was used to implement a SECURITY DEFINER function, an authenticated database user could use a PL/Perl or PL/Tcl script to modify the behavior of that function during subsequent calls in the same session. This would result in the modified or injected code also being executed with the privileges of the user who created the SECURITY DEFINER function, possibly leading to privilege escalation. (CVE-2010-3433) These updated postgresql packages upgrade PostgreSQL to version 8.4.5. Refer to the PostgreSQL Release Notes for a list of changes : http://www.postgresql.org/docs/8.4/static/release.html All PostgreSQL users are advised to upgrade to these updated packages, which correct this issue. If the postgresql service is running, it will be automatically restarted after installing this update.
last seen	2020-06-01
modified	2020-06-02
plugin id	50703
published	2010-11-24
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/50703
title	RHEL 6 : postgresql (RHSA-2010:0908)

NASL family	Databases
NASL id	POSTGRESQL_20101005.NASL
description	The version of PostgreSQL installed on the remote host is 7.4 prior to 7.4.30, 8.0 prior to 8.0.26, 8.1 prior to 8.1.22, 8.2 prior to 8.2.18, 8.3 prior to 8.3.12, 8.4 prior to 8.4.5, or 9.0 prior to 9.0.1. It therefore is potentially affected by a privilege escalation vulnerability. A remote, authenticated attacker could elevate privileges via specially crafted code in a SECURITY DEFINER function.
last seen	2020-06-01
modified	2020-06-02
plugin id	63350
published	2012-12-28
reporter	This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/63350
title	PostgreSQL 7.4 < 7.4.30 / 8.0 < 8.0.26 / 8.1 < 8.1.22 / 8.2 < 8.2.18 / 8.3 < 8.3.12 / 8.4 < 8.4.5 / 9.0 < 9.0.1

NASL family	SuSE Local Security Checks
NASL id	SUSE_POSTGRESQL-7186.NASL
description	PostgreSQL functions implemented in Perl or TCL shared a global state even across different user user ids. A user could therefore influence functions of other users in an unexpected or even malicious way. (CVE-2010-3433) PostgreSQL was updated to version 8.1.22 which fixes the security issue.
last seen	2020-06-01
modified	2020-06-02
plugin id	50043
published	2010-10-20
reporter	This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/50043
title	SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 7186)

NASL family	Misc.
NASL id	JUNIPER_NSM_2012_1.NASL
description	According to the version of one or more Juniper NSM servers running on the remote host, it is potentially vulnerable to multiple vulnerabilities, the worst of which may allow an authenticated user to trigger a denial of service condition or execute arbitrary code.
last seen	2020-06-01
modified	2020-06-02
plugin id	69872
published	2013-09-13
reporter	This script is Copyright (C) 2013-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/69872
title	Juniper NSM Servers < 2012.1 Multiple Vulnerabilities

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_2_POSTGRESQL-101019.NASL
description	PostgreSQL functions implemented in Perl or TCL shared a global state even across different user user ids. A user could therefore influence functions of other users in an unexpected or even malicious way (CVE-2010-3433).
last seen	2020-06-01
modified	2020-06-02
plugin id	50375
published	2010-10-28
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/50375
title	openSUSE Security Update : postgresql (openSUSE-SU-2010:0903-1)

Oval

accepted

2015-03-23T04:02:34.256-04:00

class

vulnerability

contributors

name SecPod Team
organization SecPod Technologies
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Mikhno
organization ALTX-SOFT

definition_extensions

comment	PostgreSQL is installed
oval	oval:org.mitre.oval:def:6785

description

family

windows

oval:org.mitre.oval:def:7291

status

accepted

submitted

2010-10-21T11:57:48

title

Privilege-escalation vulnerability in PostgreSQL version less than or equal to 9.0

version

Redhat

advisories

bugzilla

id	639371
title	CVE-2010-3433 PostgreSQL (PL/Perl, PL/Tcl): SECURITY DEFINER function keyword bypass

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 4 is installed
oval oval:com.redhat.rhba:tst:20070304025

AND
comment postgresql-jdbc is earlier than 0:7.4.30-1.el4_8.1
oval oval:com.redhat.rhsa:tst:20100742001
comment postgresql-jdbc is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060526018
AND
comment postgresql-docs is earlier than 0:7.4.30-1.el4_8.1
oval oval:com.redhat.rhsa:tst:20100742003
comment postgresql-docs is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060526020
AND
comment postgresql is earlier than 0:7.4.30-1.el4_8.1
oval oval:com.redhat.rhsa:tst:20100742005
comment postgresql is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060526022
AND
comment postgresql-pl is earlier than 0:7.4.30-1.el4_8.1
oval oval:com.redhat.rhsa:tst:20100742007
comment postgresql-pl is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060526002
AND
comment postgresql-python is earlier than 0:7.4.30-1.el4_8.1
oval oval:com.redhat.rhsa:tst:20100742009
comment postgresql-python is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060526006
AND
comment postgresql-test is earlier than 0:7.4.30-1.el4_8.1
oval oval:com.redhat.rhsa:tst:20100742011
comment postgresql-test is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060526004
AND
comment postgresql-server is earlier than 0:7.4.30-1.el4_8.1
oval oval:com.redhat.rhsa:tst:20100742013
comment postgresql-server is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060526008
AND
comment postgresql-devel is earlier than 0:7.4.30-1.el4_8.1
oval oval:com.redhat.rhsa:tst:20100742015
comment postgresql-devel is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060526010

AND

comment postgresql-contrib is earlier than 0:7.4.30-1.el4_8.1
oval oval:com.redhat.rhsa:tst:20100742017
comment postgresql-contrib is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060526012

AND
comment postgresql-libs is earlier than 0:7.4.30-1.el4_8.1
oval oval:com.redhat.rhsa:tst:20100742019
comment postgresql-libs is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060526014
AND
comment postgresql-tcl is earlier than 0:7.4.30-1.el4_8.1
oval oval:com.redhat.rhsa:tst:20100742021
comment postgresql-tcl is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060526016

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND

comment postgresql84-server is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742024
comment postgresql84-server is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430020

AND

comment postgresql84-devel is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742026
comment postgresql84-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430024

AND
comment postgresql84 is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742028
comment postgresql84 is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430006

AND

comment postgresql84-pltcl is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742030
comment postgresql84-pltcl is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430022

AND

comment postgresql84-contrib is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742032
comment postgresql84-contrib is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430004

AND

comment postgresql84-test is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742034
comment postgresql84-test is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430008

AND

comment postgresql84-tcl is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742036
comment postgresql84-tcl is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430018

AND

comment postgresql84-plpython is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742038
comment postgresql84-plpython is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430002

AND

comment postgresql84-python is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742040
comment postgresql84-python is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430010

AND

comment postgresql84-docs is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742042
comment postgresql84-docs is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430014

AND

comment postgresql84-libs is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742044
comment postgresql84-libs is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430016

AND

comment postgresql84-plperl is earlier than 0:8.4.5-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742046
comment postgresql84-plperl is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20100430012

AND
comment postgresql is earlier than 0:8.1.22-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742048
comment postgresql is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070068012

AND

comment postgresql-devel is earlier than 0:8.1.22-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742050
comment postgresql-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070068020

AND

comment postgresql-python is earlier than 0:8.1.22-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742052
comment postgresql-python is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070068002

AND
comment postgresql-pl is earlier than 0:8.1.22-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742054
comment postgresql-pl is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070068004

AND

comment postgresql-test is earlier than 0:8.1.22-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742056
comment postgresql-test is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070068008

AND

comment postgresql-libs is earlier than 0:8.1.22-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742058
comment postgresql-libs is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070068016

AND

comment postgresql-tcl is earlier than 0:8.1.22-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742060
comment postgresql-tcl is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070068014

AND

comment postgresql-docs is earlier than 0:8.1.22-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742062
comment postgresql-docs is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070068010

AND

comment postgresql-server is earlier than 0:8.1.22-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742064
comment postgresql-server is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070068018

AND

comment postgresql-contrib is earlier than 0:8.1.22-1.el5_5.1
oval oval:com.redhat.rhsa:tst:20100742066
comment postgresql-contrib is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070068006

rhsa

id	RHSA-2010:0742
released	2010-10-06
severity	Moderate
title	RHSA-2010:0742: postgresql and postgresql84 security update (Moderate)

bugzilla

id	639371
title	CVE-2010-3433 PostgreSQL (PL/Perl, PL/Tcl): SECURITY DEFINER function keyword bypass

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND
comment postgresql is earlier than 0:8.4.5-1.el6_0.2
oval oval:com.redhat.rhsa:tst:20100908001
comment postgresql is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100908002

AND

comment postgresql-pltcl is earlier than 0:8.4.5-1.el6_0.2
oval oval:com.redhat.rhsa:tst:20100908003
comment postgresql-pltcl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100908004

AND

comment postgresql-test is earlier than 0:8.4.5-1.el6_0.2
oval oval:com.redhat.rhsa:tst:20100908005
comment postgresql-test is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100908006

AND

comment postgresql-contrib is earlier than 0:8.4.5-1.el6_0.2
oval oval:com.redhat.rhsa:tst:20100908007
comment postgresql-contrib is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100908008

AND

comment postgresql-docs is earlier than 0:8.4.5-1.el6_0.2
oval oval:com.redhat.rhsa:tst:20100908009
comment postgresql-docs is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100908010

AND

comment postgresql-plperl is earlier than 0:8.4.5-1.el6_0.2
oval oval:com.redhat.rhsa:tst:20100908011
comment postgresql-plperl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100908012

AND

comment postgresql-libs is earlier than 0:8.4.5-1.el6_0.2
oval oval:com.redhat.rhsa:tst:20100908013
comment postgresql-libs is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100908014

AND

comment postgresql-devel is earlier than 0:8.4.5-1.el6_0.2
oval oval:com.redhat.rhsa:tst:20100908015
comment postgresql-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100908016

AND

comment postgresql-plpython is earlier than 0:8.4.5-1.el6_0.2
oval oval:com.redhat.rhsa:tst:20100908017
comment postgresql-plpython is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100908018

AND

comment postgresql-server is earlier than 0:8.4.5-1.el6_0.2
oval oval:com.redhat.rhsa:tst:20100908019
comment postgresql-server is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100908020

rhsa

id	RHSA-2010:0908
released	2010-11-23
severity	Moderate
title	RHSA-2010:0908: postgresql security update (Moderate)

rpms

postgresql-0:7.4.30-1.el4_8.1
postgresql-0:8.1.22-1.el5_5.1
postgresql-contrib-0:7.4.30-1.el4_8.1
postgresql-contrib-0:8.1.22-1.el5_5.1
postgresql-debuginfo-0:7.4.30-1.el4_8.1
postgresql-debuginfo-0:8.1.22-1.el5_5.1
postgresql-devel-0:7.4.30-1.el4_8.1
postgresql-devel-0:8.1.22-1.el5_5.1
postgresql-docs-0:7.4.30-1.el4_8.1
postgresql-docs-0:8.1.22-1.el5_5.1
postgresql-jdbc-0:7.4.30-1.el4_8.1
postgresql-libs-0:7.4.30-1.el4_8.1
postgresql-libs-0:8.1.22-1.el5_5.1
postgresql-pl-0:7.4.30-1.el4_8.1
postgresql-pl-0:8.1.22-1.el5_5.1
postgresql-python-0:7.4.30-1.el4_8.1
postgresql-python-0:8.1.22-1.el5_5.1
postgresql-server-0:7.4.30-1.el4_8.1
postgresql-server-0:8.1.22-1.el5_5.1
postgresql-tcl-0:7.4.30-1.el4_8.1
postgresql-tcl-0:8.1.22-1.el5_5.1
postgresql-test-0:7.4.30-1.el4_8.1
postgresql-test-0:8.1.22-1.el5_5.1
postgresql84-0:8.4.5-1.el5_5.1
postgresql84-contrib-0:8.4.5-1.el5_5.1
postgresql84-debuginfo-0:8.4.5-1.el5_5.1
postgresql84-devel-0:8.4.5-1.el5_5.1
postgresql84-docs-0:8.4.5-1.el5_5.1
postgresql84-libs-0:8.4.5-1.el5_5.1
postgresql84-plperl-0:8.4.5-1.el5_5.1
postgresql84-plpython-0:8.4.5-1.el5_5.1
postgresql84-pltcl-0:8.4.5-1.el5_5.1
postgresql84-python-0:8.4.5-1.el5_5.1
postgresql84-server-0:8.4.5-1.el5_5.1
postgresql84-tcl-0:8.4.5-1.el5_5.1
postgresql84-test-0:8.4.5-1.el5_5.1
postgresql-0:8.4.5-1.el6_0.2
postgresql-contrib-0:8.4.5-1.el6_0.2
postgresql-debuginfo-0:8.4.5-1.el6_0.2
postgresql-devel-0:8.4.5-1.el6_0.2
postgresql-docs-0:8.4.5-1.el6_0.2
postgresql-libs-0:8.4.5-1.el6_0.2
postgresql-plperl-0:8.4.5-1.el6_0.2
postgresql-plpython-0:8.4.5-1.el6_0.2
postgresql-pltcl-0:8.4.5-1.el6_0.2
postgresql-server-0:8.4.5-1.el6_0.2
postgresql-test-0:8.4.5-1.el6_0.2

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Nessus

Oval

Redhat

References