CVE-2007-3280: Critical severity PostgreSQL postgresql vulnerability
The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3280?
CVE-2007-3280 is classified as a high-severity vulnerability due to its potential to allow remote execution of arbitrary functions by privileged users.
How do I fix CVE-2007-3280?
To mitigate CVE-2007-3280, it's recommended to upgrade PostgreSQL to a version later than 8.1 that addresses this vulnerability.
Who is affected by CVE-2007-3280?
CVE-2007-3280 affects installations of PostgreSQL version 8.1 that allow superuser access.
Can CVE-2007-3280 be exploited remotely?
Yes, CVE-2007-3280 can be exploited remotely by authenticated superusers who have access to the database.
What are the potential impacts of CVE-2007-3280?
The exploitation of CVE-2007-3280 can lead to unauthorized execution of arbitrary code within the PostgreSQL database.