CVEvulnerability

CVE-2005-1410

2.1 LOW Published 2005-05-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-05-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P

Description

The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.

Affected configurations

• postgresql postgresql 7.4 • postgresql postgresql 7.4.3 • postgresql postgresql 7.4.5 • postgresql postgresql 7.4.6 • postgresql postgresql 7.4.7 • postgresql postgresql 8.0 • postgresql postgresql 8.0.1 • postgresql postgresql 8.0.2 • trustix secure linux 2.0

References