CVE-2007-6601 | BDVDB-2026-28596 Detail
Description#
The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:004
- http://www.debian.org/security/2008/dsa-1460
- http://secunia.com/advisories/28445
- http://www.securityfocus.com/bid/27163
- https://issues.rpath.com/browse/RPL-1768
- http://www.redhat.com/support/errata/RHSA-2008-0038.html
- http://secunia.com/advisories/28454
- http://www.securityfocus.com/archive/1/485864/100/0/threaded
- http://secunia.com/advisories/28359
- http://www.postgresql.org/about/news.905
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html
- http://www.vupen.com/english/advisories/2008/0061
- http://secunia.com/advisories/28679
- http://www.vupen.com/english/advisories/2008/0109
- http://secunia.com/advisories/28376
Show all 38
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1
- http://secunia.com/advisories/28437
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11127
- http://secunia.com/advisories/28455
- http://secunia.com/advisories/28477
- http://secunia.com/advisories/29638
- http://secunia.com/advisories/28479
- http://www.debian.org/security/2008/dsa-1463
- http://www.redhat.com/support/errata/RHSA-2008-0040.html
- http://www.securityfocus.com/archive/1/486407/100/0/threaded
- http://secunia.com/advisories/28464
- http://secunia.com/advisories/28698
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1
- https://usn.ubuntu.com/568-1/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39500
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html
- http://secunia.com/advisories/28438
- http://securitytracker.com/id?1019157
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html
- http://www.redhat.com/support/errata/RHSA-2008-0039.html
- http://security.gentoo.org/glsa/glsa-200801-15.xml
- http://www.vupen.com/english/advisories/2008/1071/references
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.