Vulnerability Details CVE-2005-1409
PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 81.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php
- http://www.novell.com/linux/security/advisories/2005_36_sudo.html
- http://www.postgresql.org/about/news.315
- http://www.redhat.com/support/errata/RHSA-2005-433.html
- http://www.securityfocus.com/archive/1/426302/30/6680/threaded
- http://www.securityfocus.com/bid/13476
- http://www.vupen.com/english/advisories/2005/0453
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10050
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A676
- http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php
- http://www.novell.com/linux/security/advisories/2005_36_sudo.html
- http://www.postgresql.org/about/news.315
- http://www.redhat.com/support/errata/RHSA-2005-433.html
- http://www.securityfocus.com/archive/1/426302/30/6680/threaded
- http://www.securityfocus.com/bid/13476
- http://www.vupen.com/english/advisories/2005/0453
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10050
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A676
Products affected by CVE-2005-1409
-
cpe:2.3:a:postgresql:postgresql:7.2.1
-
cpe:2.3:a:postgresql:postgresql:7.2.2
-
cpe:2.3:a:postgresql:postgresql:7.2.3
-
cpe:2.3:a:postgresql:postgresql:7.2.4
-
cpe:2.3:a:postgresql:postgresql:7.2.5
-
cpe:2.3:a:postgresql:postgresql:7.2.6
-
cpe:2.3:a:postgresql:postgresql:7.2.7
-
cpe:2.3:a:postgresql:postgresql:7.3
-
cpe:2.3:a:postgresql:postgresql:7.3.1
-
cpe:2.3:a:postgresql:postgresql:7.3.2
-
cpe:2.3:a:postgresql:postgresql:7.3.3
-
cpe:2.3:a:postgresql:postgresql:7.3.4
-
cpe:2.3:a:postgresql:postgresql:7.3.5
-
cpe:2.3:a:postgresql:postgresql:7.3.6
-
cpe:2.3:a:postgresql:postgresql:7.3.7
-
cpe:2.3:a:postgresql:postgresql:7.3.8
-
cpe:2.3:a:postgresql:postgresql:7.3.9
-
cpe:2.3:a:postgresql:postgresql:7.4
-
cpe:2.3:a:postgresql:postgresql:7.4.1
-
cpe:2.3:a:postgresql:postgresql:7.4.2
-
cpe:2.3:a:postgresql:postgresql:7.4.3
-
cpe:2.3:a:postgresql:postgresql:7.4.4
-
cpe:2.3:a:postgresql:postgresql:7.4.5
-
cpe:2.3:a:postgresql:postgresql:7.4.6
-
cpe:2.3:a:postgresql:postgresql:7.4.7
-
cpe:2.3:a:postgresql:postgresql:8.0
-
cpe:2.3:a:postgresql:postgresql:8.0.1
-
cpe:2.3:a:postgresql:postgresql:8.0.2