CWE Code: 94
Vulnerability Type: privilege_escalation
CVSS Score: 8.5
CWE Name:  Improper Control of Generation of Code ('Code Injection')
Summary: postgresql 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 beta before 9.0 beta 2 does not properly restrict pl/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary perl code via a crafted script, related to the safe module (aka safe.pm) for perl. note: some sources report that this issue is the same as cve-2010-1447.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-05-19
Last Modified Date: 2017-09-19
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Control of Generation of Code ('Code Injection').
user
CWE Code: 94
Vulnerability Type: privilege_escalation
CVSS Score: 8.5
CWE Name:  Improper Control of Generation of Code ('Code Injection')
Summary: postgresql 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 beta before 9.0 beta 2 does not properly restrict pl/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary perl code via a crafted script, related to the safe module (aka safe.pm) for perl. note: some sources report that this issue is the same as cve-2010-1447.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-05-19
Last Modified Date: 2017-09-19
assistant