CVE-2010-3433

CVE-2010-3433 describes a privilege escalation vulnerability in PostgreSQL versions 7.4 through 9.0. Specifically, the PL/perl and PL/Tcl implementations fail to adequately isolate script execution between different SQL user identities within the same session. This allows an authenticated attacker to gain elevated privileges by crafting malicious script code within a SECURITY DEFINER function, for example, by redefining standard functions or operators. The vulnerability has a CVSS score of 6.0, indicating a medium severity. It requires network access and authenticated user credentials (AV:N/Au:S), but has a medium attack complexity (AC:M). Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). Despite its age, there is no evidence of active exploitation (KEV: No), nor are there known public exploits in Metasploit or ExploitDB. Community discussion is minimal, with only one mention, and there is no media coverage, suggesting low public awareness and limited current threat.