CVE

Id
26637  
CVE No.
CVE-2007-3280  
Status
Candidate  
Description
The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.  
Phase
Assigned (20070619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270570 26637 CVE-2007-3280 BUGTRAQ:20070616 Having Fun With PostgreSQL  View
270571 26637 CVE-2007-3280 URL:http://www.securityfocus.com/archive/1/archive/1/471541/100/0/threaded  View
270572 26637 CVE-2007-3280 MISC:http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt  View
270573 26637 CVE-2007-3280 MISC:http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf  View
270574 26637 CVE-2007-3280 MANDRIVA:MDKSA-2007:188  View
270575 26637 CVE-2007-3280 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:188  View
270576 26637 CVE-2007-3280 OSVDB:40901  View
270577 26637 CVE-2007-3280 URL:http://osvdb.org/40901  View
270578 26637 CVE-2007-3280 XF:postgresql-dblink-command-execution(35145)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55326 JVNDB-2007-004018 Microsoft Office MSODataSourceControl ActiveX オブジェクトにおけるバッファオーバーフローの脆弱性 Microsoft Office MSODataSourceControl ActiveX オブジェクトには、バッファオーバーフローの脆弱性が存在します。 CVE-2007-3282 26637 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004018.html  View