Mandriva Linux Security Advisory : postgresql (MDVSA-2010:103)

high Nessus Plugin ID 46690

Language:

Synopsis

The remote Mandriva Linux host is missing one or more security updates.

Description

Multiple vulnerabilities was discovered and corrected in postgresql :

The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an overflow.
(CVE-2010-0442).

A flaw was found in the way the PostgreSQL server process enforced permission checks on scripts written in PL/Perl. A remote, authenticated user, running a specially crafted PL/Perl script, could use this flaw to bypass PL/Perl trusted mode restrictions, allowing them to obtain sensitive information; execute arbitrary Perl scripts;
or cause a denial of service (remove protected, sensitive data) (CVE-2010-1169).

The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script (CVE-2010-1170).

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement (CVE-2010-1975).

Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=4 90

This update provides a solution to these vulnerabilities.

Solution

Update the affected packages.

Plugin Details

Severity: High

ID: 46690

File Name: mandriva_MDVSA-2010-103.nasl

Version: 1.16

Type: local

Family: Mandriva Local Security Checks

Published: 5/21/2010

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 8.5

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:postgresql8.2-test, p-cpe:/a:mandriva:linux:postgresql8.3, p-cpe:/a:mandriva:linux:postgresql8.3-contrib, p-cpe:/a:mandriva:linux:postgresql8.3-devel, p-cpe:/a:mandriva:linux:postgresql8.3-docs, p-cpe:/a:mandriva:linux:postgresql8.3-pl, p-cpe:/a:mandriva:linux:postgresql8.3-plperl, p-cpe:/a:mandriva:linux:postgresql8.3-plpgsql, p-cpe:/a:mandriva:linux:postgresql8.3-plpython, p-cpe:/a:mandriva:linux:postgresql8.3-pltcl, p-cpe:/a:mandriva:linux:postgresql8.3-server, p-cpe:/a:mandriva:linux:postgresql8.4, p-cpe:/a:mandriva:linux:postgresql8.4-contrib, p-cpe:/a:mandriva:linux:postgresql8.4-devel, p-cpe:/a:mandriva:linux:postgresql8.4-docs, p-cpe:/a:mandriva:linux:postgresql8.4-pl, p-cpe:/a:mandriva:linux:postgresql8.4-plperl, p-cpe:/a:mandriva:linux:postgresql8.4-plpgsql, p-cpe:/a:mandriva:linux:postgresql8.4-plpython, p-cpe:/a:mandriva:linux:postgresql8.4-pltcl, p-cpe:/a:mandriva:linux:postgresql8.4-server, cpe:/o:mandriva:linux:2008.0, cpe:/o:mandriva:linux:2009.0, cpe:/o:mandriva:linux:2009.1, cpe:/o:mandriva:linux:2010.0, p-cpe:/a:mandriva:linux:lib64ecpg-devel, p-cpe:/a:mandriva:linux:lib64ecpg5, p-cpe:/a:mandriva:linux:lib64ecpg8.3_6, p-cpe:/a:mandriva:linux:lib64ecpg8.4_6, p-cpe:/a:mandriva:linux:lib64pq-devel, p-cpe:/a:mandriva:linux:lib64pq5, p-cpe:/a:mandriva:linux:lib64pq8.3_5, p-cpe:/a:mandriva:linux:lib64pq8.4_5, p-cpe:/a:mandriva:linux:libecpg-devel, p-cpe:/a:mandriva:linux:libecpg5, p-cpe:/a:mandriva:linux:libecpg8.3_6, p-cpe:/a:mandriva:linux:libecpg8.4_6, p-cpe:/a:mandriva:linux:libpq-devel, p-cpe:/a:mandriva:linux:libpq5, p-cpe:/a:mandriva:linux:libpq8.3_5, p-cpe:/a:mandriva:linux:libpq8.4_5, p-cpe:/a:mandriva:linux:postgresql, p-cpe:/a:mandriva:linux:postgresql-devel, p-cpe:/a:mandriva:linux:postgresql8.2, p-cpe:/a:mandriva:linux:postgresql8.2-contrib, p-cpe:/a:mandriva:linux:postgresql8.2-devel, p-cpe:/a:mandriva:linux:postgresql8.2-docs, p-cpe:/a:mandriva:linux:postgresql8.2-pl, p-cpe:/a:mandriva:linux:postgresql8.2-plperl, p-cpe:/a:mandriva:linux:postgresql8.2-plpgsql, p-cpe:/a:mandriva:linux:postgresql8.2-plpython, p-cpe:/a:mandriva:linux:postgresql8.2-pltcl, p-cpe:/a:mandriva:linux:postgresql8.2-server

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 5/20/2010

Reference Information

CVE: CVE-2010-0442, CVE-2010-1169, CVE-2010-1170, CVE-2010-1975

BID: 37973, 40215

CWE: 189

MDVSA: 2010:103

Detections

Analytics