Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-2138

20
FAUCET Score

CVE-2007-2138 is an untrusted search path vulnerability affecting PostgreSQL versions prior to 7.3.19, 7.4.17, 8.0.13, 8.1.9, and 8.2.4, as well as various Canonical and Debian distributions. This medium-complexity vulnerability allows remote authenticated users to escalate privileges to that of a function owner by exploiting search_path settings when permitted to call a SECURITY DEFINER function. Despite its age, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 7.3.19CPE matchmatch criteria
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
>= 7.4, < 7.4.17CPE matchmatch criteria
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
>= 8.0, < 8.0.13CPE matchmatch criteria
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
>= 8.1, < 8.1.9CPE matchmatch criteria
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
>= 8.2, < 8.2.4CPE matchmatch criteria
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.0MEDIUM

AV:N/AC:M/Au:S/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Exploitability Score
6.8
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
3.69%
Probability of exploitation in next 30 days
EPSS Percentile
88.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0369 is in the 94th percentile among its peer group of 1,425 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: rh-postgresql-0:7.3.19-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: postgresql-0:7.4.17-1.RHEL4.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: postgresql-0:8.1.9-1.el5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Web Application Stack for RHEL 4Fixed in: postgresql-0:8.1.9-1.el4s1.1
View patch

Vendor Advisories (1)

redhatCVE-2007-2138Moderate

PostgreSQL security-definer function privilege escalation

Apr 23, 2007

References

rhn.redhat.com / errata/RHSA-2007-0336.html
Third Party Advisory
secunia.com / advisories/24989
Third Party Advisory
secunia.com / advisories/24999
Third Party Advisory
secunia.com / advisories/25005
Third Party Advisory
secunia.com / advisories/25019
Third Party Advisory
secunia.com / advisories/25037
Third Party Advisory
secunia.com / advisories/25058
Third Party Advisory
secunia.com / advisories/25184
Third Party Advisory
secunia.com / advisories/25238
Third Party Advisory
secunia.com / advisories/25334
Third Party Advisory
secunia.com / advisories/25717
Third Party Advisory
secunia.com / advisories/25720
Third Party Advisory
secunia.com / advisories/25725
Third Party Advisory
security.gentoo.org / glsa/glsa-200705-12.xml
Third Party Advisory
exchange.xforce.ibmcloud.com / vulnerabilities/33842
Third Party AdvisoryVDB Entry
issues.rpath.com / browse/RPL-1292
Broken Link
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10090
Third Party Advisory
sunsolve.sun.com / search/document.do
Broken Link
support.avaya.com / elmodocs2/security/ASA-2007-190.htm
Third Party Advisory
debian.org / security/2007/dsa-1309
Third Party Advisory
debian.org / security/2007/dsa-1311
Third Party Advisory
mandriva.com / security/advisories
Third Party Advisory
postgresql.org / about/news.791
PatchVendor Advisory
postgresql.org / support/security.html
PatchVendor Advisory
redhat.com / support/errata/RHSA-2007-0337.html
Third Party Advisory
securityfocus.com / bid/23618
Third Party AdvisoryVDB Entry
securitytracker.com / id
Third Party AdvisoryVDB Entry
trustix.org / errata/2007/0015
Broken Link
ubuntu.com / usn/usn-454-1
Third Party Advisory
vupen.com / english/advisories/2007/1497
Third Party Advisory
vupen.com / english/advisories/2007/1549
Third Party Advisory