VULNERABILITY INTELLIGENCE

CVE-2007-3278

CVSS score6.9 MEDIUM
EPSS probability1.26%
CISA KEVNot currently listed
Published2007-06-19
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.

Primary references