CVEvulnerability
CVE-2005-1409
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."
Affected configurations
• postgresql postgresql 7.2.1
• postgresql postgresql 7.2.2
• postgresql postgresql 7.2.3
• postgresql postgresql 7.2.4
• postgresql postgresql 7.2.5
• postgresql postgresql 7.2.6
• postgresql postgresql 7.2.7
• postgresql postgresql 7.3
• postgresql postgresql 7.3.1
• postgresql postgresql 7.3.2
• postgresql postgresql 7.3.3
• postgresql postgresql 7.3.4
• postgresql postgresql 7.3.5
• postgresql postgresql 7.3.6
• postgresql postgresql 7.3.7
• postgresql postgresql 7.3.8
• postgresql postgresql 7.3.9
• postgresql postgresql 7.4
• postgresql postgresql 7.4.1
• postgresql postgresql 7.4.2
• postgresql postgresql 7.4.3
• postgresql postgresql 7.4.4
• postgresql postgresql 7.4.5
• postgresql postgresql 7.4.6
• postgresql postgresql 7.4.7
• postgresql postgresql 8.0
• postgresql postgresql 8.0.1
• postgresql postgresql 8.0.2
References
- http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php Patch
- http://www.novell.com/linux/security/advisories/2005_36_sudo.html www.novell.com
- http://www.postgresql.org/about/news.315 Patch
- http://www.redhat.com/support/errata/RHSA-2005-433.html www.redhat.com
- http://www.securityfocus.com/archive/1/426302/30/6680/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/13476 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/0453 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10050 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A676 oval.cisecurity.org
- http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php Patch
- http://www.novell.com/linux/security/advisories/2005_36_sudo.html www.novell.com
- http://www.postgresql.org/about/news.315 Patch
- http://www.redhat.com/support/errata/RHSA-2005-433.html www.redhat.com
- http://www.securityfocus.com/archive/1/426302/30/6680/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/13476 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/0453 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10050 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A676 oval.cisecurity.org