Description (CNA)
PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A676
- http://www.redhat.com/support/errata/RHSA-2005-433.html
- http://www.securityfocus.com/archive/1/426302/30/6680/threaded
- http://www.vupen.com/english/advisories/2005/0453
- http://www.securityfocus.com/bid/13476
- http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php
- http://www.postgresql.org/about/news.315
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10050
- http://www.novell.com/linux/security/advisories/2005_36_sudo.html
ADP enrichment
No English description supplied.
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A676
- http://www.redhat.com/support/errata/RHSA-2005-433.html
- http://www.securityfocus.com/archive/1/426302/30/6680/threaded
- http://www.vupen.com/english/advisories/2005/0453
- http://www.securityfocus.com/bid/13476
- http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php
- http://www.postgresql.org/about/news.315
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10050
- http://www.novell.com/linux/security/advisories/2005_36_sudo.html