CVE-2005-1409

PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."

Published: May 3, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-1409
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
postgresql / postgresql	8.0.2	8.0.2.x
postgresql / postgresql	7.2.7	7.2.7.x
postgresql / postgresql	7.3.3	7.3.3.x
postgresql / postgresql	7.3	7.3.x
postgresql / postgresql	7.4.1	7.4.1.x
postgresql / postgresql	7.3.9	7.3.9.x
postgresql / postgresql	7.2.3	7.2.3.x
postgresql / postgresql	7.2.6	7.2.6.x
postgresql / postgresql	7.4.6	7.4.6.x
postgresql / postgresql	7.4.7	7.4.7.x
postgresql / postgresql	7.4.3	7.4.3.x
postgresql / postgresql	7.3.6	7.3.6.x
postgresql / postgresql	7.2.5	7.2.5.x
postgresql / postgresql	7.4.5	7.4.5.x
postgresql / postgresql	7.3.8	7.3.8.x
postgresql / postgresql	7.4	7.4.x
postgresql / postgresql	7.4.4	7.4.4.x
postgresql / postgresql	8.0.1	8.0.1.x
postgresql / postgresql	7.2.2	7.2.2.x
postgresql / postgresql	7.3.2	7.3.2.x
postgresql / postgresql	7.3.5	7.3.5.x
postgresql / postgresql	7.2.4	7.2.4.x
postgresql / postgresql	7.3.1	7.3.1.x
postgresql / postgresql	7.3.7	7.3.7.x
postgresql / postgresql	7.2.1	7.2.1.x
postgresql / postgresql	7.4.2	7.4.2.x
postgresql / postgresql	8.0	8.0.x
postgresql / postgresql	7.3.4	7.3.4.x

Vulnerability Database

289,599

CVE-2005-1409