A flaw was found in the way the PostgreSQL enforced permission checks on scripts written in PL/Perl. Once the PL/Perl procedural language was registered on particular database, a remote, authenticated user, privileged to create databases, running a specially-crafted PL/Perl script, could use this flaw to bypass intended PL/Perl trusted mode restrictions, allowing them to run arbitrary Perl scripts with the privileges of the database server. References: [1] PostgreSQL PL/Perl procedural language manual page: http://www.postgresql.org/docs/8.1/interactive/plperl.html [2] PostgreSQL Trusted and Untrusted PL/Perl mode manual page: http://www.postgresql.org/docs/8.1/interactive/plperl-trusted.html Acknowledgements: Red Hat would like to thank Tim Bunce for responsibly reporting this issue.
This is CVE-2010-1169.
This is public now: http://www.postgresql.org/support/security.html
postgresql-8.4.4-1.fc12 has been submitted as an update for Fedora 12. http://admin.fedoraproject.org/updates/postgresql-8.4.4-1.fc12
postgresql-8.3.11-1.fc11 has been submitted as an update for Fedora 11. http://admin.fedoraproject.org/updates/postgresql-8.3.11-1.fc11
postgresql-8.4.4-1.fc13 has been submitted as an update for Fedora 13. http://admin.fedoraproject.org/updates/postgresql-8.4.4-1.fc13
postgresql-8.4.4-1.fc13 has been pushed to the Fedora 13 stable repository. If problems still persist, please make note of it in this bug report.
postgresql-8.4.4-1.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report.
postgresql-8.3.11-1.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report.
Upstream commit (head/master branch): http://git.postgresql.org/gitweb?p=postgresql.git;a=commitdiff;h=5d17e8167a82e646124617c1e00004c73aa40afc
This issue has been addressed in following products: Red Hat Enterprise Linux 3 Via RHSA-2010:0427 https://rhn.redhat.com/errata/RHSA-2010-0427.html
This issue has been addressed in following products: Red Hat Enterprise Linux 4 Via RHSA-2010:0428 https://rhn.redhat.com/errata/RHSA-2010-0428.html
This issue has been addressed in following products: Red Hat Enterprise Linux 5 Via RHSA-2010:0429 https://rhn.redhat.com/errata/RHSA-2010-0429.html
This issue has been addressed in following products: Red Hat Enterprise Linux 5 Via RHSA-2010:0430 https://rhn.redhat.com/errata/RHSA-2010-0430.html
Created sepostgresql tracking bugs for this issue Affects: fedora-all [bug 636659]