medium6.5
CVE-2005-0244
PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.
Impact
PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postgresql | Postgresql | Versions 7.2, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.postgresql.org/pgsql-hackers/2005-01/msg00922.php
- http://marc.info/?l=bugtraq&m=110806034116082&w=2
- http://secunia.com/advisories/12948
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:040
- http://www.novell.com/linux/security/advisories/2005_36_sudo.html
- http://www.redhat.com/support/errata/RHSA-2005-138.html
- http://www.securityfocus.com/bid/12417
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19184
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10927
- http://archives.postgresql.org/pgsql-hackers/2005-01/msg00922.php
- http://marc.info/?l=bugtraq&m=110806034116082&w=2
- http://secunia.com/advisories/12948
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:040
- http://www.novell.com/linux/security/advisories/2005_36_sudo.html
- http://www.redhat.com/support/errata/RHSA-2005-138.html
- http://www.securityfocus.com/bid/12417
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19184
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10927