CVE

Id
26636  
CVE No.
CVE-2007-3279  
Status
Candidate  
Description
PostgreSQL 8.1 and probably later versions, when the PL/pgSQL (plpgsql) language has been created, grants certain plpgsql privileges to the PUBLIC domain, which allows remote attackers to create and execute functions, as demonstrated by functions that perform local brute-force password guessing attacks, which may evade intrusion detection.  
Phase
Assigned (20070619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270561 26636 CVE-2007-3279 BUGTRAQ:20070616 Having Fun With PostgreSQL  View
270562 26636 CVE-2007-3279 URL:http://www.securityfocus.com/archive/1/archive/1/471541/100/0/threaded  View
270563 26636 CVE-2007-3279 MISC:http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt  View
270564 26636 CVE-2007-3279 MISC:http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf  View
270565 26636 CVE-2007-3279 MANDRIVA:MDKSA-2007:188  View
270566 26636 CVE-2007-3279 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:188  View
270567 26636 CVE-2007-3279 OSVDB:40900  View
270568 26636 CVE-2007-3279 URL:http://osvdb.org/40900  View
270569 26636 CVE-2007-3279 XF:postgresql-dblink-weak-security(35144)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55325 JVNDB-2007-004017 Php Hosting Biller の index.php におけるクロスサイトスクリプティングの脆弱性 Php Hosting Biller の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3281 26636 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004017.html  View