NVD

Id
12974  
Name
CVE-2010-1447  
Description
The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-05-19  
Modified Date
2016-12-07  
Seq
2010-1447  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
71847 12974 CVE-2010-1447 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
71848 12974 CVE-2010-1447 oval:org.mitre.oval:def:11530  View
71849 12974 CVE-2010-1447 oval:org.mitre.oval:def:7320  View
71850 12974 CVE-2010-1447 http://security-tracker.debian.org/tracker/CVE-2010-1447  View
71851 12974 CVE-2010-1447 DSA-2267  View
71852 12974 CVE-2010-1447 MDVSA-2010:115  View
71853 12974 CVE-2010-1447 MDVSA-2010:116  View
71854 12974 CVE-2010-1447 [oss-security] 20100520 CVE-2010-1974 reject request (dupe of CVE-2010-1168) and CVE-2010-1447 description modification request  View
71855 12974 CVE-2010-1447 http://www.postgresql.org/about/news.1203  View
71856 12974 CVE-2010-1447 RHSA-2010:0457  View
71857 12974 CVE-2010-1447 RHSA-2010:0458  View
71858 12974 CVE-2010-1447 40305  View
71859 12974 CVE-2010-1447 1023988  View
71860 12974 CVE-2010-1447 ADV-2010-1167  View
71861 12974 CVE-2010-1447 https://bugs.launchpad.net/bugs/cve/2010-1447  View
71862 12974 CVE-2010-1447 https://bugzilla.redhat.com/show_bug.cgi?id=588269  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35720 JVNDB-2010-001500 PostgreSQL における任意の Perl コードを実行される脆弱性 PostgreSQL には、PL/perl プロシージャを適切に制限しない不備があるため、任意の Perl コードを実行される脆弱性が存在します。 CVE-2010-1447 44027 CVE-2010-1447 12974 8.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001500.html 2010-05-14 2010-06-30 View