Skip to content

Postgres pg_read_server_files priv code execution. #3545

New issue
New issue
Closed
Closed
Postgres pg_read_server_files priv code execution.#3545
Assignees
stamparm
Labels
enhancementnormaltakeover
Milestone
1.4

Description

@0x27
0x27
opened on Mar 20, 2019

So apparently the latest Postgres has a code execution feature if the DB user you are has the "pg_read_server_files" privilege. Could be an interesting addition?

Ref: https://medium.com/greenwolf-security/authenticated-arbitrary-command-execution-on-postgresql-9-3-latest-cd18945914d5

Activity

  1. stamparm commented on Mar 21, 2019

    @stamparm
    stamparm
    on Mar 21, 2019
    Member

    Reference (for myself): https://github.com/Greenwolf/postgres_cmd_execution_nine_three/blob/master/postgres_cmd_execution_nine_three.rb

  2. stamparm
    self-assigned this
    on Mar 21, 2019
  3. stamparm
    added
    enhancement
    normal
    takeover
    on Mar 21, 2019
  4. stamparm
    added this to the 1.4 milestone on Mar 21, 2019
  5. stamparm
    added 2 commits that reference this issue on Mar 21, 2019

    In preparation for #3545

    ef5cb9a

    Finalizing #3545

    2d129f3

  6. stamparm commented on Mar 22, 2019

    @stamparm
    stamparm
    on Mar 22, 2019
    Member

    screenshot

  7. stamparm
    closed this as completedon Mar 22, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

enhancementnormaltakeover

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions