Description

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.

Remediation

References

CVE-2007-6601

Related Vulnerabilities

Moodle Improper Input Validation Vulnerability (CVE-2011-4582)

Drupal Core 7.x Remote Code Execution (7.0 - 7.58)

WordPress Plugin Shopp Multiple Vulnerabilities (1.0.17)

Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-2405)

Joomla! Core 3.x.x Security Bypass (3.2.0 - 3.9.24)

Severity

High

Classification

CVE-2007-6601 CWE-287

Tags

Missing Update Known Vulnerabilities