VYPR
Unrated severityNVD Advisory· Published Jan 9, 2008· Updated Apr 23, 2026

CVE-2007-6601

CVE-2007-6601

Description

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.

Affected products

6
  • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*range: >=7.3.0,<7.3.21
    • cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

38

News mentions

0

No linked articles in our index yet.