PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases.
| Software | From | Fixed in |
|---|---|---|
| postgresql / postgresql | 6.3.2 | 6.3.2.x |
| postgresql / postgresql | 6.5.3 | 6.5.3.x |