EDB-19875

functional

PostgreSQL 6.3.2/6.5.3 - Cleartext Passwords

view exploit source exploit_dbverifiedtype localauthor Robert van der Meulenpublished 2000-04-23catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2000-1199US	medium4.6OT elevated	0.91% (60th)	Exploit	2001-08-31
PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.