CVE-2005-0244

Severity

65%

Complexity

80%

Confidentiality

106%

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.

CVSS 2.0 Base Score 6.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:P/I:P/A:P).

Overview

Type

PostgreSQL

First reported 19 years ago

2005-05-02 04:00:00

Last updated 7 years ago

2017-10-11 01:29:00

Affected Software

PostgreSQL 7.2

7.2

PostgreSQL 7.2.1

7.2.1

PostgreSQL 7.2.2

7.2.2

PostgreSQL 7.2.3

7.2.3

PostgreSQL 7.2.4

7.2.4

PostgreSQL 7.2.5

7.2.5

PostgreSQL 7.2.6

7.2.6

PostgreSQL 7.2.7

7.2.7

PostgreSQL 7.3

7.3

PostgreSQL 7.3.1

7.3.1

PostgreSQL 7.3.2

7.3.2

PostgreSQL 7.3.3

7.3.3

PostgreSQL 7.3.4

7.3.4

PostgreSQL 7.3.5

7.3.5

PostgreSQL 7.3.6

7.3.6

PostgreSQL 7.3.7

7.3.7

PostgreSQL 7.3.8

7.3.8

PostgreSQL 7.3.9

7.3.9

PostgreSQL PostgreSQL 7.4

7.4

PostgreSQL PostgreSQL 7.4.1

7.4.1

PostgreSQL PostgreSQL 7.4.2

7.4.2

PostgreSQL PostgreSQL 7.4.3

7.4.3

PostgreSQL PostgreSQL 7.4.4

7.4.4

PostgreSQL PostgreSQL 7.4.5

7.4.5

PostgreSQL PostgreSQL 7.4.6

7.4.6

PostgreSQL PostgreSQL 7.4.7

7.4.7

References

[pgsql-hackers] 20050127 Permissions on aggregate component functions

Vendor Advisory

20050210 [USN-79-1] PostgreSQL vulnerabilities

12948

Patch, Vendor Advisory

MDKSA-2005:040

SUSE-SA:2005:036

RHSA-2005:138