NVD

Id
55433  
Name
CVE-2007-3280  
Description
The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-06-19  
Modified Date
2008-11-15  
Seq
2007-3280  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
281697 55433 CVE-2007-3280 http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt  View
281698 55433 CVE-2007-3280 MDKSA-2007:188  View
281699 55433 CVE-2007-3280 http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf  View
281700 55433 CVE-2007-3280 20070616 Having Fun With PostgreSQL  View
281701 55433 CVE-2007-3280 postgresql-dblink-command-execution(35145)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57020 JVNDB-2007-005712 PostgreSQL の dblink における全てのライブラリから関数をマッピングおよび実行される脆弱性 PostgreSQL の Database Link ライブラリ (dblink) は、関数を実装するため、全てのライブラリから関数をマッピングおよび実行される脆弱性が存在します。 CVE-2007-3280 26635 CVE-2007-3280 55433 9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005712.html 2007-06-19 2012-12-20 View