6.9
CVE-2007-3278
- EPSS 0.58%
- Published 19.06.2007 21:30:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.
Data is provided by the National Vulnerability Database (NVD)
Postgresql ≫ Postgresql Version >= 7.3 < 7.3.21
Postgresql ≫ Postgresql Version >= 7.4 < 7.4.19
Postgresql ≫ Postgresql Version >= 8.0 < 8.0.15
Postgresql ≫ Postgresql Version >= 8.1 < 8.1.11
Postgresql ≫ Postgresql Version >= 8.2 < 8.2.6
Debian ≫ Debian Linux Version3.1
Debian ≫ Debian Linux Version4.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.58% | 0.664 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.9 | 3.4 | 10 |
AV:L/AC:M/Au:N/C:C/I:C/A:C
|