Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for greenplum by pivotal_software

    CVE-2016-6656 (GCVE-0-2016-6656)

    Vulnerability from nvd – Published: 2016-12-16 09:02 – Updated: 2024-08-06 01:36
    VLAI
    Summary
    An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser 'gpadmin' access to the system or have been granted GPHDFS protocol permissions in order to create a GPHDFS external table.
    Severity
    No CVSS data available.
    CWE
    • Code injection vulnerability
    Assigner
    References
    URL Tags
    https://pivotal.io/security/cve-2016-6656 x_refsource_CONFIRM
    http://www.securityfocus.com/bid/94954 vdb-entryx_refsource_BID
    Impacted products
    Vendor Product Version
    n/a Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life Affected: Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life
    Date Public
    2016-12-16 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:36:29.475Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://pivotal.io/security/cve-2016-6656"
          },
          {
            "name": "94954",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94954"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life"
            }
          ]
        }
      ],
      "datePublic": "2016-12-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser \u0027gpadmin\u0027 access to the system or have been granted GPHDFS protocol permissions in order to create a GPHDFS external table."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Code injection vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-20T10:57:01.000Z",
        "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "shortName": "dell"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://pivotal.io/security/cve-2016-6656"
        },
        {
          "name": "94954",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94954"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security_alert@emc.com",
          "ID": "CVE-2016-6656",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser \u0027gpadmin\u0027 access to the system or have been granted GPHDFS protocol permissions in order to create a GPHDFS external table."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Code injection vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://pivotal.io/security/cve-2016-6656",
              "refsource": "CONFIRM",
              "url": "https://pivotal.io/security/cve-2016-6656"
            },
            {
              "name": "94954",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94954"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
    "assignerShortName": "dell",
    "cveId": "CVE-2016-6656",
    "datePublished": "2016-12-16T09:02:00.000Z",
    "dateReserved": "2016-08-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:36:29.475Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2016-6656 (GCVE-0-2016-6656)

    Vulnerability from cvelistv5 – Published: 2016-12-16 09:02 – Updated: 2024-08-06 01:36
    VLAI
    Summary
    An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser 'gpadmin' access to the system or have been granted GPHDFS protocol permissions in order to create a GPHDFS external table.
    Severity
    No CVSS data available.
    CWE
    • Code injection vulnerability
    Assigner
    References
    URL Tags
    https://pivotal.io/security/cve-2016-6656 x_refsource_CONFIRM
    http://www.securityfocus.com/bid/94954 vdb-entryx_refsource_BID
    Impacted products
    Vendor Product Version
    n/a Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life Affected: Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life
    Date Public
    2016-12-16 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:36:29.475Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://pivotal.io/security/cve-2016-6656"
          },
          {
            "name": "94954",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94954"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life"
            }
          ]
        }
      ],
      "datePublic": "2016-12-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser \u0027gpadmin\u0027 access to the system or have been granted GPHDFS protocol permissions in order to create a GPHDFS external table."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Code injection vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-20T10:57:01.000Z",
        "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "shortName": "dell"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://pivotal.io/security/cve-2016-6656"
        },
        {
          "name": "94954",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94954"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security_alert@emc.com",
          "ID": "CVE-2016-6656",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser \u0027gpadmin\u0027 access to the system or have been granted GPHDFS protocol permissions in order to create a GPHDFS external table."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Code injection vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://pivotal.io/security/cve-2016-6656",
              "refsource": "CONFIRM",
              "url": "https://pivotal.io/security/cve-2016-6656"
            },
            {
              "name": "94954",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94954"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
    "assignerShortName": "dell",
    "cveId": "CVE-2016-6656",
    "datePublished": "2016-12-16T09:02:00.000Z",
    "dateReserved": "2016-08-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:36:29.475Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}