|
|
CVE Reference: CVE-2007-3280 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-3280 |
|
|
Description: The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/35145 OSVDB 40901 MISC http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:188 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/471541/100/0/threaded |
|
| Return to the previous page. |
