Description
PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | postgresql-7.4 | 7.4.19-0etch1 | DSA-1463-1 |
| Debian 4.0 | postgresql-8.1 | 8.1.11-0etch1 | DSA-1460-1 |
| Debian 3.1 | postgresql | 7.4.7-6sarge6 | DSA-1463-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | postgresql +9 | 8.1.11-1.el5_1.1 | RHSA-2008:0038 |
| RHEL 4 | postgresql +10 | 7.4.19-1.el4_6.1 | RHSA-2008:0038 |
| RHEL 3 | rh-postgresql +10 | 7.3.21-1 | RHSA-2008:0039 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Application Stack 1 | postgresql +9 | 8.1.11-1.el4s1.1 | RHSA-2008:0040 |
Advisories 5
- RHSA-2008:0040 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2008:0038 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2008:0039 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1460-1 postgresql-8.1 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1463-1 postgresql-7.4 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-1460 vendor-advisory
- 28445 third-party-advisory
- RHSA-2008:0038 vendor-advisory
- 20070618 Re: Having Fun With PostgreSQL mailing-list
- 28454 third-party-advisory
- http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt
- 28679 third-party-advisory
- ADV-2008-0109 vdb-entry
- MDKSA-2007:188 vendor-advisory
- postgresql-dblink-sql-injection(35142) vdb-entry
- 28376 third-party-advisory
- 103197 vendor-advisory
- 28437 third-party-advisory
- 28477 third-party-advisory
- 29638 third-party-advisory
- 28479 third-party-advisory
- DSA-1463 vendor-advisory
- RHSA-2008:0040 vendor-advisory
- SSRT080006 vendor-advisory
- 200559 vendor-advisory
- oval:org.mitre.oval:def:10334 vdb-entry signature
- USN-568-1 vendor-advisory
- 28438 third-party-advisory
- http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf
- 20070616 Having Fun With PostgreSQL mailing-list
- RHSA-2008:0039 vendor-advisory
- GLSA-200801-15 vendor-advisory
- 40899 vdb-entry
- ADV-2008-1071 vdb-entry