CVE-2005-1409

PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."

Published: May 3, 2005
Updated: Nov 9, 2025
CVE: CVE-2005-1409
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
postgresql / postgresql	8.0.2	8.0.2.x
postgresql / postgresql	7.2.7	7.2.7.x
postgresql / postgresql	7.3.3	7.3.3.x
postgresql / postgresql	7.3	7.3.x
postgresql / postgresql	7.4.1	7.4.1.x
postgresql / postgresql	7.3.9	7.3.9.x
postgresql / postgresql	7.2.3	7.2.3.x
postgresql / postgresql	7.2.6	7.2.6.x
postgresql / postgresql	7.4.6	7.4.6.x
postgresql / postgresql	7.4.7	7.4.7.x
postgresql / postgresql	7.4.3	7.4.3.x
postgresql / postgresql	7.3.6	7.3.6.x
postgresql / postgresql	7.2.5	7.2.5.x
postgresql / postgresql	7.4.5	7.4.5.x
postgresql / postgresql	7.3.8	7.3.8.x
postgresql / postgresql	7.4	7.4.x
postgresql / postgresql	7.4.4	7.4.4.x
postgresql / postgresql	8.0.1	8.0.1.x
postgresql / postgresql	7.2.2	7.2.2.x
postgresql / postgresql	7.3.2	7.3.2.x
postgresql / postgresql	7.3.5	7.3.5.x
postgresql / postgresql	7.2.4	7.2.4.x
postgresql / postgresql	7.3.1	7.3.1.x
postgresql / postgresql	7.3.7	7.3.7.x
postgresql / postgresql	7.2.1	7.2.1.x
postgresql / postgresql	7.4.2	7.4.2.x
postgresql / postgresql	8.0	8.0.x
postgresql / postgresql	7.3.4	7.3.4.x

Vulnerability Database

300,445

CVE-2005-1409

Deep Security Visibility Without the Complexity