CVE-2007-3280 The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated s...
HighCVSS 9.0
EPSS 25.5%
Framework module
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postgresql | = 8.1 | No fix listed |
References
- 40901 vdb-entry
- www.leidecker.info
- MDKSA-2007:188 vendor-advisory
- www.portcullis.co.uk
- 20070616 Having Fun With PostgreSQL mailing-list
- postgresql-dblink-command-execution(35145) vdb-entry