Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-3280

Опубликовано: 19 июн. 2007
Источник: nvd
CVSS2: 9
EPSS Средний

Описание

The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:postgresql:postgresql:8.1:*:*:*:*:*:*:*

EPSS

Процентиль: 98%
0.50523
Средний

9 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
около 18 лет назад

The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.

debian
около 18 лет назад

The Database Link library (dblink) in PostgreSQL 8.1 implements functi ...

github
около 3 лет назад

The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.

EPSS

Процентиль: 98%
0.50523
Средний

9 Critical

CVSS2

Дефекты

NVD-CWE-Other