Vulnerability Description
The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Postgresql | Postgresql | >= 7.3.0, < 7.3.21 |
| Debian | Debian Linux | 3.1 |
| Fedoraproject | Fedora | 7 |
Related Weaknesses (CWE)
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.htmlBroken Link
- http://secunia.com/advisories/28359Not ApplicableVendor Advisory
- http://secunia.com/advisories/28376Not Applicable
- http://secunia.com/advisories/28437Not Applicable
- http://secunia.com/advisories/28438Not Applicable
- http://secunia.com/advisories/28445Not Applicable
- http://secunia.com/advisories/28454Not Applicable
- http://secunia.com/advisories/28455Not Applicable
- http://secunia.com/advisories/28464Not Applicable
- http://secunia.com/advisories/28477Not Applicable
- http://secunia.com/advisories/28479Not Applicable
- http://secunia.com/advisories/28679Not Applicable
- http://secunia.com/advisories/28698Not Applicable
- http://secunia.com/advisories/29638Not Applicable
FAQ
What is CVE-2007-6601?
CVE-2007-6601 is a vulnerability with a CVSS score of 7.2 (HIGH). The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attack...
How severe is CVE-2007-6601?
CVE-2007-6601 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-6601?
Check the references section above for vendor advisories and patch information. Affected products include: Postgresql Postgresql, Debian Debian Linux, Fedoraproject Fedora.