{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-01-06T00:00:00", "descriptions": [{"lang": "en", "value": "The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "MDVSA-2008:004", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:004"}, {"name": "DSA-1460", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2008/dsa-1460"}, {"name": "28445", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28445"}, {"name": "27163", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/27163"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://issues.rpath.com/browse/RPL-1768"}, {"name": "RHSA-2008:0038", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0038.html"}, {"name": "28454", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28454"}, {"name": "20080107 PostgreSQL 2007-01-07 Cumulative Security Release", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/485864/100/0/threaded"}, {"name": "28359", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28359"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.postgresql.org/about/news.905"}, {"name": "SUSE-SA:2008:005", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html"}, {"name": "ADV-2008-0061", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/0061"}, {"name": "28679", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28679"}, {"name": "ADV-2008-0109", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/0109"}, {"name": "28376", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28376"}, {"name": "103197", "tags": ["vendor-advisory", "x_refsource_SUNALERT"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1"}, {"name": "28437", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28437"}, {"name": "oval:org.mitre.oval:def:11127", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11127"}, {"name": "28455", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28455"}, {"name": "28477", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28477"}, {"name": "29638", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/29638"}, {"name": "28479", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28479"}, {"name": "DSA-1463", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2008/dsa-1463"}, {"name": "RHSA-2008:0040", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0040.html"}, {"name": "20080115 rPSA-2008-0016-1 postgresql postgresql-server", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/486407/100/0/threaded"}, {"name": "28464", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28464"}, {"name": "28698", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28698"}, {"name": "SSRT080006", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154"}, {"name": "200559", "tags": ["vendor-advisory", "x_refsource_SUNALERT"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1"}, {"name": "USN-568-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "https://usn.ubuntu.com/568-1/"}, {"name": "postgresql-dblink-privilege-escalation(39500)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39500"}, {"name": "FEDORA-2008-0552", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html"}, {"name": "28438", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28438"}, {"name": "1019157", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1019157"}, {"name": "FEDORA-2008-0478", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html"}, {"name": "RHSA-2008:0039", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0039.html"}, {"name": "HPSBTU02325", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154"}, {"name": "GLSA-200801-15", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200801-15.xml"}, {"name": "ADV-2008-1071", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/1071/references"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2007-6601", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "MDVSA-2008:004", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:004"}, {"name": "DSA-1460", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2008/dsa-1460"}, {"name": "28445", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28445"}, {"name": "27163", "refsource": "BID", "url": "http://www.securityfocus.com/bid/27163"}, {"name": "https://issues.rpath.com/browse/RPL-1768", "refsource": "CONFIRM", "url": "https://issues.rpath.com/browse/RPL-1768"}, {"name": "RHSA-2008:0038", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2008-0038.html"}, {"name": "28454", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28454"}, {"name": "20080107 PostgreSQL 2007-01-07 Cumulative Security Release", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/485864/100/0/threaded"}, {"name": "28359", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28359"}, {"name": "http://www.postgresql.org/about/news.905", "refsource": "CONFIRM", "url": "http://www.postgresql.org/about/news.905"}, {"name": "SUSE-SA:2008:005", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html"}, {"name": "ADV-2008-0061", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/0061"}, {"name": "28679", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28679"}, {"name": "ADV-2008-0109", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/0109"}, {"name": "28376", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28376"}, {"name": "103197", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1"}, {"name": "28437", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28437"}, {"name": "oval:org.mitre.oval:def:11127", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11127"}, {"name": "28455", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28455"}, {"name": "28477", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28477"}, {"name": "29638", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29638"}, {"name": "28479", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28479"}, {"name": "DSA-1463", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2008/dsa-1463"}, {"name": "RHSA-2008:0040", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2008-0040.html"}, {"name": "20080115 rPSA-2008-0016-1 postgresql postgresql-server", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/486407/100/0/threaded"}, {"name": "28464", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28464"}, {"name": "28698", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28698"}, {"name": "SSRT080006", "refsource": "HP", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154"}, {"name": "200559", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1"}, {"name": "USN-568-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/568-1/"}, {"name": "postgresql-dblink-privilege-escalation(39500)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39500"}, {"name": "FEDORA-2008-0552", "refsource": "FEDORA", "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html"}, {"name": "28438", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28438"}, {"name": "1019157", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1019157"}, {"name": "FEDORA-2008-0478", "refsource": "FEDORA", "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html"}, {"name": "RHSA-2008:0039", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2008-0039.html"}, {"name": "HPSBTU02325", "refsource": "HP", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154"}, {"name": "GLSA-200801-15", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200801-15.xml"}, {"name": "ADV-2008-1071", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/1071/references"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T16:11:06.038Z"}, "title": "CVE Program Container", "references": [{"name": "MDVSA-2008:004", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:004"}, {"name": "DSA-1460", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2008/dsa-1460"}, {"name": "28445", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28445"}, {"name": "27163", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/27163"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://issues.rpath.com/browse/RPL-1768"}, {"name": "RHSA-2008:0038", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0038.html"}, {"name": "28454", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28454"}, {"name": "20080107 PostgreSQL 2007-01-07 Cumulative Security Release", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/485864/100/0/threaded"}, {"name": "28359", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28359"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.postgresql.org/about/news.905"}, {"name": "SUSE-SA:2008:005", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html"}, {"name": "ADV-2008-0061", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/0061"}, {"name": "28679", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28679"}, {"name": "ADV-2008-0109", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/0109"}, {"name": "28376", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28376"}, {"name": "103197", "tags": ["vendor-advisory", "x_refsource_SUNALERT", "x_transferred"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1"}, {"name": "28437", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28437"}, {"name": "oval:org.mitre.oval:def:11127", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11127"}, {"name": "28455", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28455"}, {"name": "28477", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28477"}, {"name": "29638", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/29638"}, {"name": "28479", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28479"}, {"name": "DSA-1463", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2008/dsa-1463"}, {"name": "RHSA-2008:0040", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0040.html"}, {"name": "20080115 rPSA-2008-0016-1 postgresql postgresql-server", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/486407/100/0/threaded"}, {"name": "28464", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28464"}, {"name": "28698", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28698"}, {"name": "SSRT080006", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154"}, {"name": "200559", "tags": ["vendor-advisory", "x_refsource_SUNALERT", "x_transferred"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1"}, {"name": "USN-568-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "https://usn.ubuntu.com/568-1/"}, {"name": "postgresql-dblink-privilege-escalation(39500)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39500"}, {"name": "FEDORA-2008-0552", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html"}, {"name": "28438", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28438"}, {"name": "1019157", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1019157"}, {"name": "FEDORA-2008-0478", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html"}, {"name": "RHSA-2008:0039", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0039.html"}, {"name": "HPSBTU02325", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154"}, {"name": "GLSA-200801-15", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-200801-15.xml"}, {"name": "ADV-2008-1071", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/1071/references"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-6601", "datePublished": "2008-01-09T21:00:00", "dateReserved": "2007-12-31T00:00:00", "dateUpdated": "2024-08-07T16:11:06.038Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "matchCriteriaId": "69279942-4D12-4924-96BE-EE42CEE8C6D4", "versionEndExcluding": "7.3.21", "versionStartIncluding": "7.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "matchCriteriaId": "A2A8D367-7B80-43B1-88CF-773792A01CCB", "versionEndExcluding": "7.4.19", "versionStartIncluding": "7.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "matchCriteriaId": "44129F9A-F9CC-46A8-95AD-30573220DC70", "versionEndExcluding": "8.0.15", "versionStartIncluding": "8.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "matchCriteriaId": "2FC070BF-4154-4686-A5E0-6A8E942DAFDF", "versionEndExcluding": "8.1.11", "versionStartIncluding": "8.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "matchCriteriaId": "809B71BC-405A-4696-ABFA-91BD4F3AE784", "versionEndExcluding": "8.2.6", "versionStartIncluding": "8.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*", "matchCriteriaId": "7213327F-6909-43A7-952E-11600C28D4E3", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*", "matchCriteriaId": "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "0F92AB32-E7DE-43F4-B877-1F41FA162EC7", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*", "matchCriteriaId": "E3EFD171-01F7-450B-B6F3-0F7E443A2337", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*", "matchCriteriaId": "72E4DB7F-07C3-46BB-AAA2-05CD0312C57F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278."}, {"lang": "es", "value": "El m\u00f3dulo DBLink en PostgreSQL 8.2 anterior a 8.2.6, 8.1 anterior a 8.1.11, 8.0 anterior a 8.0.15, 7.4 anterior a 7.4.19, y 7.3 anterior a 7.3.21, cuando locales de confianza o identidades de autenticaci\u00f3n son utilizadas, permite a atacantes remotos ganar privlegios a trav\u00e9s de vectores no especificados. NOTA: este asunto existe a causa de un parche incompleto para CVE-2007-3278."}], "id": "CVE-2007-6601", "lastModified": "2024-11-21T00:40:32.883", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-01-09T21:46:00.000", "references": [{"source": "[email protected]", "tags": ["Broken Link"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html"}, {"source": "[email protected]", "tags": ["Not Applicable", "Vendor Advisory"], "url": "http://secunia.com/advisories/28359"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28376"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28437"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28438"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28445"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28454"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28455"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28464"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28477"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28479"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28679"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28698"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/29638"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://security.gentoo.org/glsa/glsa-200801-15.xml"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://securitytracker.com/id?1019157"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2008/dsa-1460"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2008/dsa-1463"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:004"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://www.postgresql.org/about/news.905"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0038.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0039.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0040.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/485864/100/0/threaded"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/486407/100/0/threaded"}, {"source": "[email protected]", "tags": ["Patch", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/27163"}, {"source": "[email protected]", "tags": ["Permissions Required"], "url": "http://www.vupen.com/english/advisories/2008/0061"}, {"source": "[email protected]", "tags": ["Permissions Required", "Third Party Advisory"], "url": "http://www.vupen.com/english/advisories/2008/0109"}, {"source": "[email protected]", "tags": ["Permissions Required"], "url": "http://www.vupen.com/english/advisories/2008/1071/references"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39500"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "https://issues.rpath.com/browse/RPL-1768"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11127"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "https://usn.ubuntu.com/568-1/"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable", "Vendor Advisory"], "url": "http://secunia.com/advisories/28359"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28376"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28437"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28438"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28445"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28454"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28455"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28464"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28477"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28479"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28679"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/28698"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://secunia.com/advisories/29638"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://security.gentoo.org/glsa/glsa-200801-15.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://securitytracker.com/id?1019157"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2008/dsa-1460"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2008/dsa-1463"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:004"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.postgresql.org/about/news.905"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0038.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0039.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0040.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/485864/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/486407/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/27163"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "http://www.vupen.com/english/advisories/2008/0061"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required", "Third Party Advisory"], "url": "http://www.vupen.com/english/advisories/2008/0109"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "http://www.vupen.com/english/advisories/2008/1071/references"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39500"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "https://issues.rpath.com/browse/RPL-1768"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11127"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "https://usn.ubuntu.com/568-1/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "[email protected]", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2008:0039", "cpe": "cpe:/o:redhat:enterprise_linux:3", "package": "rh-postgresql-0:7.3.21-1", "product_name": "Red Hat Enterprise Linux 3", "release_date": "2008-01-11T00:00:00Z"}, {"advisory": "RHSA-2008:0038", "cpe": "cpe:/o:redhat:enterprise_linux:4", "package": "postgresql-0:7.4.19-1.el4_6.1", "product_name": "Red Hat Enterprise Linux 4", "release_date": "2008-01-11T00:00:00Z"}, {"advisory": "RHSA-2008:0038", "cpe": "cpe:/o:redhat:enterprise_linux:5", "package": "postgresql-0:8.1.11-1.el5_1.1", "product_name": "Red Hat Enterprise Linux 5", "release_date": "2008-01-11T00:00:00Z"}, {"advisory": "RHSA-2008:0040", "cpe": "cpe:/a:redhat:rhel_application_stack:1", "package": "postgresql-0:8.1.11-1.el4s1.1", "product_name": "Red Hat Web Application Stack for RHEL 4", "release_date": "2008-02-01T00:00:00Z"}], "bugzilla": {"description": "PostgreSQL privilege escalation via dblink", "id": "427128", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=427128"}, "csaw": false, "details": ["The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278."], "name": "CVE-2007-6601", "public_date": "2008-01-07T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2007-6601\nhttps://nvd.nist.gov/vuln/detail/CVE-2007-6601"], "threat_severity": "Moderate", "upstream_fix": "8.2.6 1.fc8"}