Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-6600
HistoryJan 09, 2008 - 9:46 p.m.

CVE-2007-6600

2008-01-0921:46:00
CWE-264
[email protected]
web.nvd.nist.gov
42
postgresql
cve-2007-6600
vulnerability
privilege escalation
nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.1%

JSON

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.

Affected configurations

NVD
Node
postgresqlpostgresqlMatch7.3
OR
postgresqlpostgresqlMatch7.3.1
OR
postgresqlpostgresqlMatch7.3.2
OR
postgresqlpostgresqlMatch7.3.3
OR
postgresqlpostgresqlMatch7.3.4
OR
postgresqlpostgresqlMatch7.3.5
OR
postgresqlpostgresqlMatch7.3.6
OR
postgresqlpostgresqlMatch7.3.7
OR
postgresqlpostgresqlMatch7.3.8
OR
postgresqlpostgresqlMatch7.3.9
OR
postgresqlpostgresqlMatch7.3.10
OR
postgresqlpostgresqlMatch7.3.11
OR
postgresqlpostgresqlMatch7.3.12
OR
postgresqlpostgresqlMatch7.3.13
OR
postgresqlpostgresqlMatch7.3.14
OR
postgresqlpostgresqlMatch7.3.15
OR
postgresqlpostgresqlMatch7.3.16
OR
postgresqlpostgresqlMatch7.3.17
OR
postgresqlpostgresqlMatch7.3.18
OR
postgresqlpostgresqlMatch7.3.19
OR
postgresqlpostgresqlMatch7.4
OR
postgresqlpostgresqlMatch7.4.1
OR
postgresqlpostgresqlMatch7.4.2
OR
postgresqlpostgresqlMatch7.4.3
OR
postgresqlpostgresqlMatch7.4.4
OR
postgresqlpostgresqlMatch7.4.5
OR
postgresqlpostgresqlMatch7.4.6
OR
postgresqlpostgresqlMatch7.4.7
OR
postgresqlpostgresqlMatch7.4.8
OR
postgresqlpostgresqlMatch7.4.9
OR
postgresqlpostgresqlMatch7.4.10
OR
postgresqlpostgresqlMatch7.4.11
OR
postgresqlpostgresqlMatch7.4.12
OR
postgresqlpostgresqlMatch7.4.13
OR
postgresqlpostgresqlMatch7.4.14
OR
postgresqlpostgresqlMatch7.4.16
OR
postgresqlpostgresqlMatch7.4.17
OR
postgresqlpostgresqlMatch7.4.18
OR
postgresqlpostgresqlMatch8.0
OR
postgresqlpostgresqlMatch8.0.0
OR
postgresqlpostgresqlMatch8.0.1
OR
postgresqlpostgresqlMatch8.0.2
OR
postgresqlpostgresqlMatch8.0.3
OR
postgresqlpostgresqlMatch8.0.4
OR
postgresqlpostgresqlMatch8.0.5
OR
postgresqlpostgresqlMatch8.0.6
OR
postgresqlpostgresqlMatch8.0.7
OR
postgresqlpostgresqlMatch8.0.8
OR
postgresqlpostgresqlMatch8.0.9
OR
postgresqlpostgresqlMatch8.0.10
OR
postgresqlpostgresqlMatch8.0.11
OR
postgresqlpostgresqlMatch8.0.12
OR
postgresqlpostgresqlMatch8.0.13
OR
postgresqlpostgresqlMatch8.0.14
OR
postgresqlpostgresqlMatch8.1.1
OR
postgresqlpostgresqlMatch8.1.2
OR
postgresqlpostgresqlMatch8.1.3
OR
postgresqlpostgresqlMatch8.1.4
OR
postgresqlpostgresqlMatch8.1.5
OR
postgresqlpostgresqlMatch8.1.6
OR
postgresqlpostgresqlMatch8.1.7
OR
postgresqlpostgresqlMatch8.1.8
OR
postgresqlpostgresqlMatch8.1.9
OR
postgresqlpostgresqlMatch8.1.10
OR
postgresqlpostgresqlMatch8.2
OR
postgresqlpostgresqlMatch8.2.1
OR
postgresqlpostgresqlMatch8.2.2
OR
postgresqlpostgresqlMatch8.2.3
OR
postgresqlpostgresqlMatch8.2.4
OR
postgresqlpostgresqlMatch8.2.5

References

Related

openvas 62
nvd 3
postgresql 1
nessus 34
cvelist 3
veracode 2
prion 3
ubuntucve 3
fedora 4
oraclelinux 2
centos 4
redhat 6
cve 2
ubuntu 2
securityvulns 4
freebsd 2
suse 1
osv 2
debian 2
gentoo 1
openvas
openvas
Fedora Core 11 FEDORA-2009-9473 (postgresql)
2009-09-15 00:00:00
Fedora Core 11 FEDORA-2009-9473 (postgresql)
2009-09-15 00:00:00
Fedora Core 10 FEDORA-2009-9474 (postgresql)
2009-09-15 00:00:00
nvd
nvd
CVE-2007-6600
2008-01-09 21:46:00
CVE-2009-3230
2009-09-17 10:30:00
CVE-2009-4136
2009-12-15 18:30:01
postgresql
postgresql
Vulnerability in core server (CVE-2007-6600)
2008-01-09 21:46:00
nessus
nessus
PostgreSQL Multiple Vulnerabilities
2009-09-14 00:00:00
Oracle Linux 3 : postgresql (ELSA-2009-1485)
2013-07-12 00:00:00
CentOS 3 : postgresql (CESA-2009:1485)
2009-10-08 00:00:00
cvelist
cvelist
CVE-2007-6600
2008-01-09 21:00:00
CVE-2009-3230
2009-09-17 10:00:00
CVE-2009-4136
2009-12-15 18:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:19:40
Privilege Escalation
2020-04-10 00:37:07
prion
prion
Authorization
2008-01-09 21:46:00
Authorization
2009-09-17 10:30:00
Sql injection
2009-12-15 18:30:00
ubuntucve
ubuntucve
CVE-2007-6600
2008-01-09 00:00:00
CVE-2009-3230
2009-09-17 00:00:00
CVE-2009-4136
2009-12-15 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: postgresql-8.3.8-1.fc11
2009-09-11 23:21:13
[SECURITY] Fedora 10 Update: postgresql-8.3.8-1.fc10
2009-09-11 23:21:46
[SECURITY] Fedora 8 Update: postgresql-8.2.6-1.fc8
2008-01-11 22:14:38
oraclelinux
oraclelinux
Moderate: postgresql security update
2008-01-11 00:00:00
Moderate: postgresql security update
2008-01-11 00:00:00
centos
centos
rh security update
2009-10-07 21:13:30
postgresql security update
2009-10-09 15:00:55
rh security update
2008-01-11 14:31:56
redhat
redhat
(RHSA-2009:1485) Moderate: postgresql security update
2009-10-07 00:00:00
(RHSA-2009:1484) Moderate: postgresql security update
2009-10-07 00:00:00
(RHSA-2008:0039) Moderate: postgresql security update
2008-01-11 00:00:00
cve
cve
CVE-2009-3230
2009-09-17 10:30:00
CVE-2009-4136
2009-12-15 18:30:01
ubuntu
ubuntu
PostgreSQL vulnerabilities
2009-09-21 00:00:00
PostgreSQL vulnerabilities
2008-01-14 00:00:00
securityvulns
securityvulns
[ MDVSA-2009:333 ] postgresql
2009-12-15 00:00:00
[USN-834-1] PostgreSQL vulnerabilities
2009-09-22 00:00:00
PostgreSQL database server multiple security vulnerabilities
2008-01-08 00:00:00
freebsd
freebsd
postgresql -- multiple vulnerabilities
2009-11-20 00:00:00
postgresql -- multiple vulnerabilities
2008-01-06 00:00:00
suse
suse
remote code execution in postgresql
2008-02-06 10:24:49
osv
osv
postgresql-7.4 - several
2008-01-14 00:00:00
postgresql-8.1 - several
2008-01-13 00:00:00
debian
debian
[SECURITY] [DSA 1463-1] New postgresql-7.4 packages fix several vulnerabilities
2008-01-14 18:51:52
[SECURITY] [DSA 1460-1] New postgresql-8.1 packages fix several vulnerabilities
2008-01-13 15:45:01
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2008-01-29 00:00:00

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.1%

JSON
Related for CVE-2007-6600
openvas62nvd3postgresql1nessus34cvelist3veracode2prion3ubuntucve3fedora4oraclelinux2centos4redhat6cve2ubuntu2securityvulns4freebsd2suse1osv2debian2gentoo1