Title: PostgreSQL dblink host Variable Crafted Localhost Proxy Remote Privilege Escalation

Unknown or Incomplete

• CVE ID: 2007-3278 (see also: NVD)
• Secunia Advisory ID: 28376 28437 28438 28445 28454 28477 28479 28679 29638
• ISS X-Force ID: 35142
• VUPEN Advisory: ADV-2008-0109
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-06/0210.html
  http://archives.neohapsis.com/archives/bugtraq/2007-06/0223.html
  http://archives.neohapsis.com/archives/bugtraq/2008-04/0021.html
• Vendor Specific Solution URL: http://security.gentoo.org/glsa/glsa-200801-15.xml
  http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1
• Vendor Specific Advisory URL: http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1
• Other Advisory URL: http://www.debian.org/security/2008/dsa-1460
  http://www.debian.org/security/2008/dsa-1463
  http://www.gentoo.org/security/en/glsa/glsa-200801-15.xml
  http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt
  http://www.mandriva.com/security/advisories?name=MDKSA-2007:188
  http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf
  http://www.ubuntulinux.org/support/documentation/usn/usn-568-1
• RedHat RHSA: RHSA-2008:0038 RHSA-2008:0039

Unknown or Incomplete