Signature Detail
Short Name |
DB:POSTGRESQL:LINUX-DBLINK-RCE |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
DB |
Keywords |
PostgreSQL Database Link Library Linux Remote Code Execution |
Release Date |
2013/03/21 |
Update Number |
2247 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DB: PostgreSQL Database Link Library Linux Remote Code Execution
This signature detects attempts to exploit a known vulnerability against PostgreSQL. A successful attack can lead to arbitrary code execution.
Extended Description
The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.
Affected Products
- postgresql 8.1
References
- CVE: CVE-2007-3280