Detections
Analytics
CVE-2007-6601
critical
Description
The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.
References
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/39500
http://www.vupen.com/english/advisories/2008/0109
http://www.securityfocus.com/bid/27163
http://www.securityfocus.com/archive/1/486407/100/0/threaded
http://www.securityfocus.com/archive/1/485864/100/0/threaded
http://www.redhat.com/support/errata/RHSA-2008-0040.html
http://www.redhat.com/support/errata/RHSA-2008-0039.html
http://www.redhat.com/support/errata/RHSA-2008-0038.html
http://www.debian.org/security/2008/dsa-1463
http://www.vupen.com/english/advisories/2008/1071/references
http://www.vupen.com/english/advisories/2008/0061
http://secunia.com/advisories/29638
http://secunia.com/advisories/28698
http://secunia.com/advisories/28679
http://secunia.com/advisories/28479
http://secunia.com/advisories/28477
http://secunia.com/advisories/28464
http://secunia.com/advisories/28455
http://secunia.com/advisories/28454
http://secunia.com/advisories/28445
http://secunia.com/advisories/28438
http://secunia.com/advisories/28437