VULNERABILITY INTELLIGENCE

CVE-2007-6601

CVSS score7.2 HIGH
EPSS probability1.57%
CISA KEVNot currently listed
Published2008-01-09
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.

Weakness classification

  • CWE-287: Improper Authentication

Primary references