Security Advisory

CVE-2007-3278

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-06-19 21:00:00

Last updated 2024-08-07 14:14:12

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.

← Browse all CVEs View on cve.org ↗