CVE-2007-3278
PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the...
6.9 MediumFix available
CVE-2007-3278 is a medium vulnerability (CVSS 6.9) in Postgresql, published June 19, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. Fixed in postgresql-8.1 8.1.11-0etch1.
PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.
Exploit likelihood
1.26%Down 1.3 points since Feb 4, 2022
What each source reports
NVD Score used
PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.
- Record
CVE-2007-3278- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.
- Record
CVE-2007-3278- Updated
- 2026-11-02
EUVDEUVD-2007-3268 No score
PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.
- Record
EUVD-2007-3268- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cf95-2h9h-gh2x No score
PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the...
PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.
- Record
GHSA-cf95-2h9h-gh2x- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresql-8.1Debian:4.0 |
before 8.1.11-0etch1, plus listed versions 8.1.10-0etch18.1.10-18.1.8-18.1.8-28.1.9-0etch18.1.9-0etch28.1.9-1 |
8.1.11-0etch1 |
postgresql-7.4Debian:4.0 |
before 7.4.19-0etch1 | 7.4.19-0etch1 |
postgresqlDebian:3.1 |
before 7.4.7-6sarge6, plus listed versions 7.4.7-6sarge17.4.7-6sarge27.4.7-6sarge37.4.7-6sarge47.4.7-6sarge5 |
7.4.7-6sarge6 |
postgresqlRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-contribRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-develRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-docsRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-libsRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
Show 124 moreShow less
| Package | Affected | Fixed |
|---|---|---|
postgresql-plRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-serverRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-tclRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-testRed Hat:enterprise_linux:4::as |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresqlRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresqlRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-contribRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-develRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-docsRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-libsRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-plRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-serverRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-tclRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-testRed Hat:enterprise_linux:4::es |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresqlRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-develRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-plRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresql-testRed Hat:enterprise_linux:4::ws |
before 0:7.4.19-1.el4_6.1 | 0:7.4.19-1.el4_6.1 |
postgresqlRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-develRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-plRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-serverRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-testRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresqlRed Hat:enterprise_linux:5::client |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-contribRed Hat:enterprise_linux:5::client |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-docsRed Hat:enterprise_linux:5::client |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-libsRed Hat:enterprise_linux:5::client |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-pythonRed Hat:enterprise_linux:5::client |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-tclRed Hat:enterprise_linux:5::client |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresqlRed Hat:enterprise_linux:5::server |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-contribRed Hat:enterprise_linux:5::server |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::server |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-develRed Hat:enterprise_linux:5::server |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-docsRed Hat:enterprise_linux:5::server |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-libsRed Hat:enterprise_linux:5::server |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-plRed Hat:enterprise_linux:5::server |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-pythonRed Hat:enterprise_linux:5::server |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-serverRed Hat:enterprise_linux:5::server |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-tclRed Hat:enterprise_linux:5::server |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
postgresql-testRed Hat:enterprise_linux:5::server |
before 0:8.1.11-1.el5_1.1 | 0:8.1.11-1.el5_1.1 |
rh-postgresqlRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-plRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-tclRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::as |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresqlRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-plRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::es |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresqlRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-1 | 0:7.3.21-1 |
postgresqlRed Hat:rhel_application_stack:1 |
before 0:8.1.11-1.el4s1.1 | 0:8.1.11-1.el4s1.1 |
postgresql-contribRed Hat:rhel_application_stack:1 |
before 0:8.1.11-1.el4s1.1 | 0:8.1.11-1.el4s1.1 |
postgresql-debuginfoRed Hat:rhel_application_stack:1 |
before 0:8.1.11-1.el4s1.1 | 0:8.1.11-1.el4s1.1 |
postgresql-develRed Hat:rhel_application_stack:1 |
before 0:8.1.11-1.el4s1.1 | 0:8.1.11-1.el4s1.1 |
postgresql-docsRed Hat:rhel_application_stack:1 |
before 0:8.1.11-1.el4s1.1 | 0:8.1.11-1.el4s1.1 |
postgresql-libsRed Hat:rhel_application_stack:1 |
before 0:8.1.11-1.el4s1.1 | 0:8.1.11-1.el4s1.1 |
postgresql-plRed Hat:rhel_application_stack:1 |
before 0:8.1.11-1.el4s1.1 | 0:8.1.11-1.el4s1.1 |
postgresql-pythonRed Hat:rhel_application_stack:1 |
before 0:8.1.11-1.el4s1.1 | 0:8.1.11-1.el4s1.1 |
postgresql-serverRed Hat:rhel_application_stack:1 |
before 0:8.1.11-1.el4s1.1 | 0:8.1.11-1.el4s1.1 |
postgresql-tclRed Hat:rhel_application_stack:1 |
before 0:8.1.11-1.el4s1.1 | 0:8.1.11-1.el4s1.1 |
postgresql-testRed Hat:rhel_application_stack:1 |
before 0:8.1.11-1.el4s1.1 | 0:8.1.11-1.el4s1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | affected, aliases, facts, references, title | GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |
References
debian.org/security/2008/dsa-1460
secunia.com/advisories/28445
redhat.com/support/errata/RHSA-2008-0038.html
securityfocus.com/archive/1/471644/100/0/threaded
leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt
Show 55 moreShow less
vupen.com/english/advisories/2008/0109
mandriva.com/security/advisories?name=MDKSA-2007:188
exchange.xforce.ibmcloud.com/vulnerabilities/35142
sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10334
usn.ubuntu.com/568-1
portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf
security.gentoo.org/glsa/glsa-200801-15.xml
osvdb.org/40899
nvd.nist.gov/vuln/detail/CVE-2007-3278
github.com/advisories/GHSA-cf95-2h9h-gh2x
access.redhat.com/errata/RHSA-2008:0038
bugzilla.redhat.com/show_bug.cgi?id=309141
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0038.json
cve.org/CVERecord?id=CVE-2007-3278