CVE-2019-9193
84Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 92%
da publicação à arma37 dias
Publicada no NVD1 de abr.
1ª PoC+37d
metasploit20 de mar.
VulnCheck+662d
probabilidade de exploração
92%top 1% das CVEs
exploração observada
simVulnCheck
22 exploit(s) público(s)
In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 22✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/46813githubgithub.com/b4keSn4ke/CVE-2019-9193★ 21githubgithub.com/geniuszly/CVE-2019-9193★ 4githubgithub.com/wkjung0624/cve-2019-9193★ 3githubgithub.com/paulotrindadec/CVE-2019-9193★ 1githubgithub.com/corsisechero/CVE-2019-9193byVulHub★ 0githubgithub.com/CybersRMUTL/CVE-2019-9193-Postgresql-RCE★ 0githubgithub.com/jhnhnck/CVE-2019-9193★ 0githubgithub.com/netw0rk7/CVE-2019-9193-Home-Lab★ 0vulncheckvulncheck.com/xdb/7917b63fa40fnão verificadovulncheckvulncheck.com/xdb/1736beb5bce4não verificadovulncheckvulncheck.com/xdb/18caab4f43c9não verificadocve_referencepacketstormsecurity.com/files/152757/PostgreSQL-COPY-FROM-PROGRAM-Command-Execution.htmlnão verificadovulncheckvulncheck.com/xdb/acb3ad6082cbnão verificadocve_referencepacketstormsecurity.com/files/166540/PostgreSQL-11.7-Remote-Code-Execution.htmlnão verificadocve_referencepacketstormsecurity.com/files/171722/PostgreSQL-9.6.1-Remote-Code-Execution.htmlnão verificadovulncheckvulncheck.com/xdb/6272649d9a3bnão verificadovulncheckvulncheck.com/xdb/3bde608f037cnão verificadovulncheckvulncheck.com/xdb/7163ff91f6bbnão verificadovulncheckvulncheck.com/xdb/e86cc1c8300anão verificadovulncheckvulncheck.com/xdb/ae385be7fbf9não verificadovulncheckvulncheck.com/xdb/d49085c8a0denão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/152757/PostgreSQL-COPY-FROM-PROGRAM-Command-Execution.htmlhttp://packetstormsecurity.com/files/166540/PostgreSQL-11.7-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/171722/PostgreSQL-9.6.1-Remote-Code-Execution.htmlhttps://blog.hagander.net/when-a-vulnerability-is-not-a-vulnerability-244/https://medium.com/greenwolf-security/authenticated-arbitrary-command-execution-on-postgresql-9-3-latest-cd18945914d5https://paquier.xyz/postgresql-2/postgres-9-3-feature-highlight-copy-tofrom-program/https://security.netapp.com/advisory/ntap-20190502-0003/https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/authenticated-arbitrary-command-execution-on-postgresql-9-3/