CVE-2007-3278.json

{
    "CVE-ID": "CVE-2007-3278",
    "NVD": {
        "Descriptions": "PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.",
        "Cvss2_BaseScore": 6.9,
        "Cvss3_BaseScore": 0,
        "Cvss2_VectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
        "Cvss3_VectorString": "",
        "CPEs": [
            {
                "URI": "cpe:/o:debian:debian_linux:4.0",
                "FormattedString": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:debian:debian_linux:3.1",
                "FormattedString": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "7.3",
                "VersionEndExcluding": "7.3.21",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "7.4",
                "VersionEndExcluding": "7.4.19",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "8.0",
                "VersionEndExcluding": "8.0.15",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "8.1",
                "VersionEndExcluding": "8.1.11",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "8.2",
                "VersionEndExcluding": "8.2.6",
                "VersionEndIncluding": ""
            }
        ]
    },
    "Official": {
        "8.2.6": {
            "source": [
                "https://www.postgresql.org/docs/release/8.2.6/"
            ]
        },
        "8.1.11": {
            "source": [
                "https://www.postgresql.org/docs/release/8.1.11/"
            ]
        },
        "8.0.15": {
            "source": [
                "https://www.postgresql.org/docs/release/8.0.15/"
            ]
        },
        "7.4.19": {
            "source": [
                "https://www.postgresql.org/docs/release/7.4.19/"
            ]
        },
        "7.3.21": {
            "source": [
                "https://www.postgresql.org/docs/release/7.3.21/"
            ]
        }
    }
}