CVE-2007-3278

Publication date 19 June 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.

Status

Package Ubuntu Release Status
postgresql-8.1 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected
postgresql-8.2 7.04 feisty
Not affected
6.10 edgy Not in release
6.06 LTS dapper Not in release

References

Related Ubuntu Security Notices (USN)

    • USN-568-1
    • PostgreSQL vulnerabilities
    • 14 January 2008

Other references