CVE-2007-6601

2008-01-0900:00:00

ubuntu.com

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

72.7%

JSON

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0
before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust
or ident authentication is used, allows remote attackers to gain privileges
via unspecified vectors. NOTE: this issue exists because of an incomplete
fix for CVE-2007-3278.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/postgresql/+bug/181720>

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchpostgresql-8.1< 8.1.11-0ubuntu0.6.06.1UNKNOWN
ubuntu6.10noarchpostgresql-8.1< 8.1.11-0ubuntu0.6.10.1UNKNOWN
ubuntu7.04noarchpostgresql-8.2< 8.2.6-0ubuntu0.7.04.1UNKNOWN
ubuntu7.10noarchpostgresql-8.2< 8.2.6-0ubuntu0.7.10.1UNKNOWN
ubuntu8.04noarchpostgresql-8.2< 8.2.6-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	postgresql-8.1	< 8.1.11-0ubuntu0.6.06.1	UNKNOWN
ubuntu	6.10	noarch	postgresql-8.1	< 8.1.11-0ubuntu0.6.10.1	UNKNOWN
ubuntu	7.04	noarch	postgresql-8.2	< 8.2.6-0ubuntu0.7.04.1	UNKNOWN
ubuntu	7.10	noarch	postgresql-8.2	< 8.2.6-0ubuntu0.7.10.1	UNKNOWN
ubuntu	8.04	noarch	postgresql-8.2	< 8.2.6-1	UNKNOWN