CVEvulnerability

CVE-2007-6601

7.2 HIGH Published 2008-01-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-01-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.

Affected configurations

• postgresql postgresql (>= 7.3.0 < 7.3.21) • postgresql postgresql (>= 7.4.0 < 7.4.19) • postgresql postgresql (>= 8.0.0 < 8.0.15) • postgresql postgresql (>= 8.1.0 < 8.1.11) • postgresql postgresql (>= 8.2.0 < 8.2.6) • postgresql postgresql 8.2 • debian debian linux 3.1 • debian debian linux 4.0 • fedoraproject fedora 7 • fedoraproject fedora 8

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References