Description

PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."

Remediation

References

CVE-2005-1409

Related Vulnerabilities

WordPress Plugin Contact Form Email Information Disclosure (1.2.66)

Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33513)

GeoServer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23819)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-2376)

MySQL CVE-2017-3646 Vulnerability (CVE-2017-3646)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2005-1409