CVE-2007-6601: Debian Linux

High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days.

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.

Affected products

• Debian Debian Linux: version 3.1 only; version 4.0 only
• Fedoraproject Fedora: version 7 only; version 8 only
• PostgreSQL PostgreSQL: from 7.3.0, before 7.3.21 (fixed in 7.3.21); from 7.4.0, before 7.4.19 (fixed in 7.4.19); from 8.0.0, before 8.0.15 (fixed in 8.0.15); from 8.1.0, before 8.1.11 (fixed in 8.1.11); from 8.2.0, before 8.2.6 (fixed in 8.2.6); version 8.2 only

Published 2008-01-09. Last modified 2026-06-16.