CVE-2007-6601

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.

• CWE-287

• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154Broken Link
• http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.htmlBroken Link
• http://secunia.com/advisories/28359Not Applicable, Vendor Advisory
• http://secunia.com/advisories/28376Not Applicable
• http://secunia.com/advisories/28437Not Applicable
• http://secunia.com/advisories/28438Not Applicable
• http://secunia.com/advisories/28445Not Applicable
• http://secunia.com/advisories/28454Not Applicable
• http://secunia.com/advisories/28455Not Applicable
• http://secunia.com/advisories/28464Not Applicable
• http://secunia.com/advisories/28477Not Applicable
• http://secunia.com/advisories/28479Not Applicable
• http://secunia.com/advisories/28679Not Applicable
• http://secunia.com/advisories/28698Not Applicable
• http://secunia.com/advisories/29638Not Applicable
• http://security.gentoo.org/glsa/glsa-200801-15.xmlThird Party Advisory
• http://securitytracker.com/id?1019157Broken Link, Third Party Advisory, VDB Entry
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1Broken Link
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1Broken Link
• http://www.debian.org/security/2008/dsa-1460Third Party Advisory
• http://www.debian.org/security/2008/dsa-1463Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:004Broken Link
• http://www.postgresql.org/about/news.905Broken Link
• http://www.redhat.com/support/errata/RHSA-2008-0038.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2008-0039.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2008-0040.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/485864/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/486407/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/27163Patch, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/0061Permissions Required
• http://www.vupen.com/english/advisories/2008/0109Permissions Required, Third Party Advisory
• http://www.vupen.com/english/advisories/2008/1071/referencesPermissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39500Third Party Advisory, VDB Entry
• https://issues.rpath.com/browse/RPL-1768Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11127Broken Link
• https://usn.ubuntu.com/568-1/Broken Link
• https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.htmlMailing List, Third Party Advisory
• https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.htmlMailing List, Third Party Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154Broken Link
• http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.htmlBroken Link
• http://secunia.com/advisories/28359Not Applicable, Vendor Advisory
• http://secunia.com/advisories/28376Not Applicable
• http://secunia.com/advisories/28437Not Applicable
• http://secunia.com/advisories/28438Not Applicable
• http://secunia.com/advisories/28445Not Applicable
• http://secunia.com/advisories/28454Not Applicable
• http://secunia.com/advisories/28455Not Applicable
• http://secunia.com/advisories/28464Not Applicable
• http://secunia.com/advisories/28477Not Applicable
• http://secunia.com/advisories/28479Not Applicable
• http://secunia.com/advisories/28679Not Applicable
• http://secunia.com/advisories/28698Not Applicable
• http://secunia.com/advisories/29638Not Applicable
• http://security.gentoo.org/glsa/glsa-200801-15.xmlThird Party Advisory
• http://securitytracker.com/id?1019157Broken Link, Third Party Advisory, VDB Entry
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1Broken Link
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1Broken Link
• http://www.debian.org/security/2008/dsa-1460Third Party Advisory
• http://www.debian.org/security/2008/dsa-1463Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:004Broken Link
• http://www.postgresql.org/about/news.905Broken Link
• http://www.redhat.com/support/errata/RHSA-2008-0038.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2008-0039.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2008-0040.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/485864/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/486407/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/27163Patch, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/0061Permissions Required
• http://www.vupen.com/english/advisories/2008/0109Permissions Required, Third Party Advisory
• http://www.vupen.com/english/advisories/2008/1071/referencesPermissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39500Third Party Advisory, VDB Entry
• https://issues.rpath.com/browse/RPL-1768Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11127Broken Link
• https://usn.ubuntu.com/568-1/Broken Link
• https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.htmlMailing List, Third Party Advisory
• https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.htmlMailing List, Third Party Advisory

Published

Jan 9, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-6595ClamAV 0.92 allows local users to overwrite arbitrary files …
• CVE-2007-6596ClamAV 0.92 does not recognize Base64 UUEncoded archives, wh…
• CVE-2007-6597Multiple cross-site scripting (XSS) vulnerabilities in IPort…
• CVE-2007-6598Dovecot before 1.0.10, with certain configuration options in…
• CVE-2007-6599Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5…
• CVE-2007-6600PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8…
• CVE-2007-6602SQL injection vulnerability in app/models/identity.php in No…
• CVE-2007-6603Hot or Not Clone has insufficient access control for produci…
• CVE-2007-6604Multiple directory traversal vulnerabilities in index.php in…
• CVE-2007-6605Buffer overflow in a certain ActiveX control in SkyFexClient…
• CVE-2007-6606OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to…
• CVE-2007-6607OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to…