CVE-2007-3280

CVE-2007-3280 describes a critical vulnerability in PostgreSQL 8.1's Database Link (dblink) library, allowing remote authenticated superusers to execute arbitrary code. By leveraging CREATE statements that map to C libraries, an attacker can load and execute functions from any library, such as libc.so.6, to gain shell access. This vulnerability carries a CVSS score of 9.0, indicating high severity with network accessibility, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not on the KEV catalog, a Metasploit module exists for exploitation, and its EPSS score suggests a higher-than-average likelihood of exploitation despite minimal community discussion or media coverage.