CVE-2005-0227: Code Injection
Published Feb 6, 2005
·Updated
PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension.
Affected Software
17 affected components
PostgreSQL postgresql>=7.3.0<7.3.9
PostgreSQL postgresql>=7.4<7.4.7
PostgreSQL postgresql>=8.0<8.0.1
PostgreSQL postgresql=7.2.7
PostgreSQL postgresql=7.4.1
PostgreSQL postgresql=7.2.3
PostgreSQL postgresql=7.2.6
PostgreSQL postgresql=7.4.6
PostgreSQL postgresql=7.4.7
PostgreSQL postgresql=7.4.3
PostgreSQL postgresql=7.2.5
PostgreSQL postgresql=7.4.5
PostgreSQL postgresql=7.4.4
PostgreSQL postgresql=7.2.2
PostgreSQL postgresql=7.2.4
PostgreSQL postgresql=7.2.1
PostgreSQL postgresql=7.4.2
Remediation
Patch Available
Patch Available
Event History
Feb 6, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0227?
CVE-2005-0227 has a moderate severity rating since it allows local users to execute arbitrary code.
2
How do I fix CVE-2005-0227?
To fix CVE-2005-0227, upgrade PostgreSQL to a version that is not affected, preferably the latest stable release.
3
Which versions of PostgreSQL are affected by CVE-2005-0227?
CVE-2005-0227 affects PostgreSQL versions 7.2.x, 7.4.x, and several other versions prior to 7.4.8.
4
What kind of attack is possible due to CVE-2005-0227?
An attacker can exploit CVE-2005-0227 by loading malicious shared libraries to execute arbitrary code on the server.
5
Who can exploit CVE-2005-0227?
CVE-2005-0227 can be exploited by any local user with access to the PostgreSQL server.