CVE-2005-0244: Medium severity PostgreSQL postgresql vulnerability
Published Feb 8, 2005
·Updated
PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.
Affected Software
27 affected components
PostgreSQL postgresql=7.2.7
PostgreSQL postgresql=7.3.3
PostgreSQL postgresql=7.2
PostgreSQL postgresql=7.3
PostgreSQL postgresql=7.4.1
PostgreSQL postgresql=7.3.9
PostgreSQL postgresql=7.2.3
PostgreSQL postgresql=8.0.0
PostgreSQL postgresql=7.2.6
PostgreSQL postgresql=7.4.6
PostgreSQL postgresql=7.4.7
PostgreSQL postgresql=7.4.3
PostgreSQL postgresql=7.3.6
PostgreSQL postgresql=7.2.5
PostgreSQL postgresql=7.4.5
PostgreSQL postgresql=7.3.8
PostgreSQL postgresql=7.4
PostgreSQL postgresql=7.4.4
PostgreSQL postgresql=7.2.2
PostgreSQL postgresql=7.3.2
PostgreSQL postgresql=7.3.5
PostgreSQL postgresql=7.2.4
PostgreSQL postgresql=7.3.1
PostgreSQL postgresql=7.3.7
PostgreSQL postgresql=7.2.1
PostgreSQL postgresql=7.4.2
PostgreSQL postgresql=7.3.4
Remediation
Patch Available
Patch Available
Event History
Feb 8, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0244?
CVE-2005-0244 has a medium severity due to its potential to allow local users to bypass permission checks.
2
How do I fix CVE-2005-0244?
To fix CVE-2005-0244, upgrade PostgreSQL to a version later than 8.0.0 that addresses this vulnerability.
3
Who is affected by CVE-2005-0244?
Local users of PostgreSQL 8.0.0 and earlier versions are affected by CVE-2005-0244.
4
What does CVE-2005-0244 exploit?
CVE-2005-0244 exploits the ability of local users to use the CREATE AGGREGATE command to bypass EXECUTE permission checks.
5
Which versions of PostgreSQL are vulnerable to CVE-2005-0244?
PostgreSQL versions 8.0.0 and earlier are vulnerable to CVE-2005-0244.