CVE-2005-1409

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-03 · updated 2026-06-16

Description

PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."

Affected products

PostgreSQL: 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6 (+22)

References

http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php
http://www.novell.com/linux/security/advisories/2005_36_sudo.html
http://www.postgresql.org/about/news.315
http://www.redhat.com/support/errata/RHSA-2005-433.html
http://www.securityfocus.com/archive/1/426302/30/6680/threaded
http://www.securityfocus.com/bid/13476
http://www.vupen.com/english/advisories/2005/0453
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10050
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A676
http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php
http://www.novell.com/linux/security/advisories/2005_36_sudo.html
http://www.postgresql.org/about/news.315

Get alerted when CVE-2005-1409 or the next vulnerability affects your stack