NVD

Id
58596  
Name
CVE-2007-6601  
Description
The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2008-01-09  
Modified Date
2011-03-07  
Seq
2007-6601  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
300635 58596 CVE-2007-6601 HPSBTU02325  View
300636 58596 CVE-2007-6601 SUSE-SA:2008:005  View
300637 58596 CVE-2007-6601 oval:org.mitre.oval:def:11127  View
300638 58596 CVE-2007-6601 GLSA-200801-15  View
300639 58596 CVE-2007-6601 1019157  View
300640 58596 CVE-2007-6601 103197  View
300641 58596 CVE-2007-6601 200559  View
300642 58596 CVE-2007-6601 DSA-1460  View
300643 58596 CVE-2007-6601 DSA-1463  View
300644 58596 CVE-2007-6601 MDVSA-2008:004  View
300645 58596 CVE-2007-6601 http://www.postgresql.org/about/news.905  View
300646 58596 CVE-2007-6601 RHSA-2008:0038  View
300647 58596 CVE-2007-6601 RHSA-2008:0039  View
300648 58596 CVE-2007-6601 RHSA-2008:0040  View
300649 58596 CVE-2007-6601 20080107 PostgreSQL 2007-01-07 Cumulative Security Release  View
300650 58596 CVE-2007-6601 20080115 rPSA-2008-0016-1 postgresql postgresql-server  View
300651 58596 CVE-2007-6601 27163  View
300652 58596 CVE-2007-6601 USN-568-1  View
300653 58596 CVE-2007-6601 ADV-2008-0061  View
300654 58596 CVE-2007-6601 ADV-2008-0109  View
300655 58596 CVE-2007-6601 ADV-2008-1071  View
300656 58596 CVE-2007-6601 postgresql-dblink-privilege-escalation(39500)  View
300657 58596 CVE-2007-6601 https://issues.rpath.com/browse/RPL-1768  View
300658 58596 CVE-2007-6601 FEDORA-2008-0478  View
300659 58596 CVE-2007-6601 FEDORA-2008-0552  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45698 JVNDB-2008-001008 PostgreSQL の DBLink モジュールにおける権限昇格の脆弱性 PostgreSQL の DBLink モジュールには、local trust もしくは ident 認証を使用している場合、それらの認証を用いてデータベースへアクセスが可能となる脆弱性が存在します。 CVE-2007-6601 29956 CVE-2007-6601 58596 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001008.html 2008-01-06 2009-12-18 View