CVE-2007-3278

Publication date 19 June 2007

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.

Status

Package Ubuntu Release Status
postgresql-8.1 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected
postgresql-8.2 7.04 feisty
Not affected
6.10 edgy Not in release
6.06 LTS dapper Not in release

References

Related Ubuntu Security Notices (USN)

    • USN-568-1
    • PostgreSQL vulnerabilities
    • 14 January 2008

Other references