PostgreSQL PL/Perl and PL/Tcl Privilege Escalation Vulnerability

Release date:
Updated on:

Affected Systems:
PostgreSQL 9.x
PostgreSQL 8.x
PostgreSQL 7.x
Unaffected system:
PostgreSQL 9.0.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 43747
Cve id: CVE-2010-3433, CVE-2010-3781

PostgreSQL is an advanced object-relational database management system that supports extended SQL standard subsets.

PostgreSQL's PL/perl and PL/Tcl implementations do not properly protect scripts executed by different SQL user identities in the same session, you can use the PL/Perl and PL/Tcl speech functions to modify the security definer functions created by other users. If PL/Perl or PL/Tcl is used to implement the security definer function, authenticated database users can use PL/Perl or PL/Tcl scripts to modify the behavior of the function after the same session is called. This may cause the user permission to create the security definer function to execute the modified or injected code, resulting in a higher permission.

<* Source: Tim Bunce

Link: http://secunia.com/advisories/41692/
Https://bugzilla.redhat.com/show_bug.cgi? Format = multiple & amp; id = 639371
Https://www.redhat.com/support/errata/RHSA-2010-0742.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

PostgreSQL
----------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.postgresql.org/docs/9.0/static/release-9-0-1.html

RedHat
------
For this reason, RedHat has released a Security Bulletin (RHSA-2010: 0742-01) and patch:
RHSA-2010: 0742-01: Moderate: postgresql and postgresql sql84 security update
Link: https://www.redhat.com/support/errata/RHSA-2010-0742.html