Description
The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Video Player Multiple Vulnerabilities (1.5.4)
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7081)
WordPress Plugin MAC PHOTO GALLERY 'albid' Parameter Arbitrary File Disclosure (2.8)
Oracle Application Server Other Vulnerability (CVE-2006-3710)