CVE ID:	CVE-2007-3279
Description:	PostgreSQL 8.1 and probably later versions, when the PL/pgSQL (plpgsql) language has been created, grants certain plpgsql privileges to the PUBLIC domain, which allows remote attackers to create and execute functions, as demonstrated by functions that perform local brute-force password guessing attacks, which may evade intrusion detection.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3279 Bugtraq: 20070616 Having Fun With PostgreSQL (Google Search) http://www.securityfocus.com/archive/1/471541/100/0/threaded http://www.mandriva.com/security/advisories?name=MDKSA-2007:188 http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf http://osvdb.org/40900 XForce ISS Database: postgresql-dblink-weak-security(35144) https://exchange.xforce.ibmcloud.com/vulnerabilities/35144