| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | = 7.4= 7.4.1= 7.4.10= 7.4.11= 7.4.12= 7.4.13= 7.4.14= 7.4.15= 7.4.16= 7.4.17= 7.4.18= 7.4.19= 7.4.2= 7.4.20= 7.4.21= 7.4.22= 7.4.23= 7.4.24= 7.4.25= 7.4.26= 7.4.27= 7.4.28= 7.4.3= 7.4.4= 7.4.5= 7.4.6= 7.4.7= 7.4.8= 7.4.9= 8.0= 8.0.0= 8.0.1= 8.0.10= 8.0.11= 8.0.12= 8.0.13= 8.0.14= 8.0.15= 8.0.16= 8.0.17= 8.0.18= 8.0.19= 8.0.2= 8.0.20= 8.0.21= 8.0.22= 8.0.23= 8.0.24= 8.0.3= 8.0.4= 8.0.5= 8.0.6= 8.0.7= 8.0.8= 8.0.9= 8.1= 8.1.0= 8.1.1= 8.1.10= 8.1.11= 8.1.12= 8.1.13= 8.1.14= 8.1.15= 8.1.16= 8.1.17= 8.1.18= 8.1.19= 8.1.2= 8.1.20= 8.1.3= 8.1.4= 8.1.5= 8.1.6= 8.1.7= 8.1.8= 8.1.9= 8.2= 8.2.1= 8.2.10= 8.2.11= 8.2.12= 8.2.13= 8.2.14= 8.2.15= 8.2.16= 8.2.2= 8.2.3= 8.2.4= 8.2.5= 8.2.6= 8.2.7= 8.2.8= 8.2.9= 8.3= 8.3.1= 8.3.10= 8.3.2= 8.3.3= 8.3.4= 8.3.5= 8.3.6= 8.3.7= 8.3.8= 8.3.9= 8.4= 8.4.1= 8.4.2= 8.4.3= 9.0.0 |
The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free