The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade postgresql-serverUpgrade postgresql | Dec 10, 2025 | Apr 24, 2008 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Jan 9, 2008 |
| Oracle_linux | — | Upgrade postgresql-libsUpgrade postgresql-tclUpgrade postgresql-pythonUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-plUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-docs | Oct 16, 2024 | Jan 9, 2008 |
| Suse | — | Upgrade postgresql-develUpgrade postgresql-libs-32bitUpgrade postgresql-contribUpgrade postgresql94-docsUpgrade libpq5-32bitUpgrade libecpg6Upgrade postgresql94Upgrade postgresql91-serverUpgrade postgresql91-docsUpgrade postgresql94-contribUpgrade postgresql91-contribUpgrade postgresql-serverUpgrade libpq5Upgrade postgresql94-serverUpgrade postgresql-libsUpgrade postgresql94-develUpgrade postgresql-docsUpgrade postgresql-libs-x86Upgrade postgresql91Upgrade postgresql | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade postgresql-pltcl-8.1Upgrade postgresql-pltcl-8.2Upgrade postgresql-8.2Upgrade postgresql-8.1 | Nov 8, 2024 | Jan 9, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub