CVE-2007-6601: High severity PostgreSQL postgresql vulnerability
The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6601?
CVE-2007-6601 has a high severity rating due to the potential for privilege escalation through the DBLink module.
How do I fix CVE-2007-6601?
To fix CVE-2007-6601, you should upgrade to PostgreSQL version 8.2.6 or later, 8.1.11 or later, 8.0.15 or later, 7.4.19 or later, or 7.3.21 or later.
What versions of PostgreSQL are affected by CVE-2007-6601?
CVE-2007-6601 affects PostgreSQL versions prior to 8.2.6, 8.1.11, 8.0.15, 7.4.19, and 7.3.21.
Who is at risk from CVE-2007-6601?
Organizations using vulnerable versions of PostgreSQL with local trust or ident authentication are at risk of privilege escalation from remote attackers.
What is the nature of the vulnerability in CVE-2007-6601?
CVE-2007-6601 allows remote attackers to gain elevated privileges through unspecified vectors related to the DBLink module.