Every CVE Search/ Get API key

CVE-2007-6600

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3...

6.5 MediumFix available

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.

Exploit likelihood

3.12%Up 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.

Record
CVE-2007-6600
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.

Record
CVE-2007-6600
Updated
2026-11-02
EUVDEUVD-2007-6566 No score

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.

Record
EUVD-2007-6566
Updated
2026-11-03
GitHub AdvisoriesGHSA-r647-cwmv-xwwc No score

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3...

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.

Record
GHSA-r647-cwmv-xwwc
Updated
2026-11-02
OSVopenSUSE-SU-2024:10030-1 No score

postgresql94-9.4.10-1.1 on GA media

These are all security issues fixed in the postgresql94-9.4.10-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10030-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10256-1 No score

postgresql93-9.3.15-1.1 on GA media

These are all security issues fixed in the postgresql93-9.3.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10256-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10273-1 No score

libecpg6-32bit-9.5.4-1.2 on GA media

These are all security issues fixed in the libecpg6-32bit-9.5.4-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10273-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postgresql-8.1
Debian:4.0
before 8.1.11-0etch1, plus listed versions
8.1.10-0etch18.1.10-18.1.8-18.1.8-28.1.9-0etch18.1.9-0etch28.1.9-1
8.1.11-0etch1
postgresql-7.4
Debian:4.0
before 7.4.19-0etch1
7.4.19-0etch1
postgresql
Debian:3.1
before 7.4.7-6sarge6, plus listed versions
7.4.7-6sarge17.4.7-6sarge27.4.7-6sarge37.4.7-6sarge47.4.7-6sarge5
7.4.7-6sarge6
postgresql
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-contrib
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-debuginfo
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-devel
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-docs
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-jdbc
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-libs
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
Show 127 moreShow less
Affected packages
PackageAffectedFixed
postgresql-pl
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-python
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-server
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-tcl
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-test
Red Hat:enterprise_linux:4::as
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-contrib
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-devel
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-docs
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-jdbc
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-libs
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-pl
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-python
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-server
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-tcl
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-test
Red Hat:enterprise_linux:4::desktop
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-contrib
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-debuginfo
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-devel
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-docs
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-jdbc
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-libs
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-pl
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-python
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-server
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-tcl
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-test
Red Hat:enterprise_linux:4::es
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-contrib
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-devel
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-docs
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-jdbc
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-libs
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-pl
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-python
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-server
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-tcl
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql-test
Red Hat:enterprise_linux:4::ws
before 0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
postgresql
Red Hat:enterprise_linux:5::client_workstation
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-pl
Red Hat:enterprise_linux:5::client_workstation
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-server
Red Hat:enterprise_linux:5::client_workstation
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-test
Red Hat:enterprise_linux:5::client_workstation
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql
Red Hat:enterprise_linux:5::client
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-contrib
Red Hat:enterprise_linux:5::client
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-debuginfo
Red Hat:enterprise_linux:5::client
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-docs
Red Hat:enterprise_linux:5::client
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-libs
Red Hat:enterprise_linux:5::client
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-python
Red Hat:enterprise_linux:5::client
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-tcl
Red Hat:enterprise_linux:5::client
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql
Red Hat:enterprise_linux:5::server
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-contrib
Red Hat:enterprise_linux:5::server
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-debuginfo
Red Hat:enterprise_linux:5::server
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-devel
Red Hat:enterprise_linux:5::server
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-docs
Red Hat:enterprise_linux:5::server
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-libs
Red Hat:enterprise_linux:5::server
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-pl
Red Hat:enterprise_linux:5::server
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-python
Red Hat:enterprise_linux:5::server
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-server
Red Hat:enterprise_linux:5::server
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-tcl
Red Hat:enterprise_linux:5::server
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
postgresql-test
Red Hat:enterprise_linux:5::server
before 0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
rh-postgresql
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-contrib
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-debuginfo
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-devel
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-docs
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-jdbc
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-libs
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-pl
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-python
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-server
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-tcl
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-test
Red Hat:enterprise_linux:3::as
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-contrib
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-debuginfo
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-devel
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-docs
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-jdbc
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-libs
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-pl
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-python
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-server
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-tcl
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-test
Red Hat:enterprise_linux:3::desktop
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-contrib
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-debuginfo
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-devel
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-docs
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-jdbc
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-libs
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-pl
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-python
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-server
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-tcl
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-test
Red Hat:enterprise_linux:3::es
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-contrib
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-debuginfo
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-devel
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-docs
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-jdbc
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-libs
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-pl
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-python
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-server
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-tcl
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
rh-postgresql-test
Red Hat:enterprise_linux:3::ws
before 0:7.3.21-1
0:7.3.21-1
postgresql
Red Hat:rhel_application_stack:1
before 0:8.1.11-1.el4s1.1
0:8.1.11-1.el4s1.1
postgresql-contrib
Red Hat:rhel_application_stack:1
before 0:8.1.11-1.el4s1.1
0:8.1.11-1.el4s1.1
postgresql-debuginfo
Red Hat:rhel_application_stack:1
before 0:8.1.11-1.el4s1.1
0:8.1.11-1.el4s1.1
postgresql-devel
Red Hat:rhel_application_stack:1
before 0:8.1.11-1.el4s1.1
0:8.1.11-1.el4s1.1
postgresql-docs
Red Hat:rhel_application_stack:1
before 0:8.1.11-1.el4s1.1
0:8.1.11-1.el4s1.1
postgresql-libs
Red Hat:rhel_application_stack:1
before 0:8.1.11-1.el4s1.1
0:8.1.11-1.el4s1.1
postgresql-pl
Red Hat:rhel_application_stack:1
before 0:8.1.11-1.el4s1.1
0:8.1.11-1.el4s1.1
postgresql-python
Red Hat:rhel_application_stack:1
before 0:8.1.11-1.el4s1.1
0:8.1.11-1.el4s1.1
postgresql-server
Red Hat:rhel_application_stack:1
before 0:8.1.11-1.el4s1.1
0:8.1.11-1.el4s1.1
postgresql-tcl
Red Hat:rhel_application_stack:1
before 0:8.1.11-1.el4s1.1
0:8.1.11-1.el4s1.1
postgresql-test
Red Hat:rhel_application_stack:1
before 0:8.1.11-1.el4s1.1
0:8.1.11-1.el4s1.1
postgresql94
openSUSE:Tumbleweed
before 9.4.10-1.1
9.4.10-1.1
postgresql93
openSUSE:Tumbleweed
before 9.3.15-1.1
9.3.15-1.1
postgresql95
openSUSE:Tumbleweed
before 9.5.4-1.2
9.5.4-1.2

History

History
RecordedChangedSources
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6600 is a medium vulnerability (CVSS 6.5) in Postgresql, published January 9, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 87th percentile. Fixed in postgresql-8.1 8.1.11-0etch1.

References

Show 106 moreShow less
MoveEnter Open