Lucene search
MitreCVELIST:CVE-2007-3280HistoryJun 19, 2007 - 9:00 p.m.
CVE-2007-3280
2007-06-1921:00:00
mitre
www.cve.org
2
The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.
References
osvdb.org/40901
www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt
www.mandriva.com/security/advisories?name=MDKSA-2007:188
www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf
www.securityfocus.com/archive/1/471541/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/35145
Related
cve
cve
CVE-2007-3280
2007-06-19 21:30:00
redhatcve
redhatcve
CVE-2007-3280
2015-10-30 09:52:34
prion
prion
Design/Logic Flaw
2007-06-19 21:30:00
ubuntucve
ubuntucve
CVE-2007-3280
2007-06-19 00:00:00
nvd
nvd
CVE-2007-3280
2007-06-19 21:30:00
exploitdb
exploitdb
PostgreSQL for Linux Payload Execution
2012-12-13 00:00:00
openvas
openvas
Mandriva Update for postgresql MDKSA-2007:188 (postgresql)
2009-04-09 00:00:00
Mandriva Update for postgresql MDKSA-2007:188 (postgresql)
2009-04-09 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : postgresql (MDKSA-2007:188)
2007-09-26 00:00:00
securityvulns
securityvulns
PostgreSQL dblink library multiple security vulnerabilities
2007-09-26 00:00:00