CVE-2019-9193
84Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 92%
da publicação à arma37 dias
Publicada no NVD1 de abr.
1ª PoC+37d
metasploit20 de mar.
VulnCheck+662d
probabilidade de exploração
92%top 1% das CVEs
exploração observada
simVulnCheck
22 exploit(s) público(s)
O que os fabricantes declaram (VEX)
Declarações oficiais dos fabricantes em formato CSAF/VEX: se o produto deles está afetado, já corrigido ou descartado — e por quê. É afirmação do fabricante, não juízo do Vexday.
Red Hatdocumento VEX ↗
Não afetado
8 produtos (105 componentes) — porque o código vulnerável não está presente no produto
Red Hat Software Collections · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 7 · CloudForms Management Engine 5 · Red Hat Enterprise Linux 6 · e outros 3
In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 22✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/46813githubgithub.com/b4keSn4ke/CVE-2019-9193★ 21githubgithub.com/geniuszly/CVE-2019-9193★ 4githubgithub.com/wkjung0624/cve-2019-9193★ 3githubgithub.com/paulotrindadec/CVE-2019-9193★ 1githubgithub.com/netw0rk7/CVE-2019-9193-Home-Lab★ 0githubgithub.com/CybersRMUTL/CVE-2019-9193-Postgresql-RCE★ 0githubgithub.com/corsisechero/CVE-2019-9193byVulHub★ 0githubgithub.com/jhnhnck/CVE-2019-9193★ 0vulncheckvulncheck.com/xdb/18caab4f43c9não verificadovulncheckvulncheck.com/xdb/acb3ad6082cbnão verificadocve_referencepacketstormsecurity.com/files/171722/PostgreSQL-9.6.1-Remote-Code-Execution.htmlnão verificadocve_referencepacketstormsecurity.com/files/166540/PostgreSQL-11.7-Remote-Code-Execution.htmlnão verificadovulncheckvulncheck.com/xdb/7917b63fa40fnão verificadovulncheckvulncheck.com/xdb/6272649d9a3bnão verificadovulncheckvulncheck.com/xdb/3bde608f037cnão verificadovulncheckvulncheck.com/xdb/7163ff91f6bbnão verificadovulncheckvulncheck.com/xdb/e86cc1c8300anão verificadovulncheckvulncheck.com/xdb/ae385be7fbf9não verificadovulncheckvulncheck.com/xdb/d49085c8a0denão verificadocve_referencepacketstormsecurity.com/files/152757/PostgreSQL-COPY-FROM-PROGRAM-Command-Execution.htmlnão verificadovulncheckvulncheck.com/xdb/1736beb5bce4não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/152757/PostgreSQL-COPY-FROM-PROGRAM-Command-Execution.htmlhttp://packetstormsecurity.com/files/166540/PostgreSQL-11.7-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/171722/PostgreSQL-9.6.1-Remote-Code-Execution.htmlhttps://blog.hagander.net/when-a-vulnerability-is-not-a-vulnerability-244/https://medium.com/greenwolf-security/authenticated-arbitrary-command-execution-on-postgresql-9-3-latest-cd18945914d5https://paquier.xyz/postgresql-2/postgres-9-3-feature-highlight-copy-tofrom-program/https://security.netapp.com/advisory/ntap-20190502-0003/https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/authenticated-arbitrary-command-execution-on-postgresql-9-3/