VulnerableCode Package Details - pkg:generic/postgresql@7.4.8

Search for packages

Vulnerability	Summary	Fixed by
This package is not known to be affected by vulnerabilities.

Vulnerability

Summary

Fixed by

This package is not known to be affected by vulnerabilities.

Vulnerability	Summary	Aliases
VCID-a57d-1aph-aaam	PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."	CVE-2005-1409
VCID-h44v-ttyu-aaaf	The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.	CVE-2005-1410
VCID-zxng-yspq-aaak	Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.	CVE-2005-0247

Vulnerability

Summary

Aliases

VCID-a57d-1aph-aaam

PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."

CVE-2005-1409

VCID-h44v-ttyu-aaaf

The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.

CVE-2005-1410

VCID-zxng-yspq-aaak

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.

CVE-2005-0247

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-03-28T07:42:33.102316+00:00	PostgreSQL Importer	Fixing	VCID-zxng-yspq-aaak	https://www.postgresql.org/support/security/CVE-2005-0247	36.0.0
2025-03-28T07:42:32.998007+00:00	PostgreSQL Importer	Fixing	VCID-h44v-ttyu-aaaf	https://www.postgresql.org/support/security/CVE-2005-1410	36.0.0
2025-03-28T07:42:27.513363+00:00	PostgreSQL Importer	Fixing	VCID-a57d-1aph-aaam	https://www.postgresql.org/support/security/CVE-2005-1409	36.0.0
2024-09-18T01:55:04.844361+00:00	PostgreSQL Importer	Fixing	VCID-zxng-yspq-aaak	https://www.postgresql.org/support/security/CVE-2005-0247	34.0.1
2024-09-18T01:55:04.781940+00:00	PostgreSQL Importer	Fixing	VCID-a57d-1aph-aaam	https://www.postgresql.org/support/security/CVE-2005-1409	34.0.1
2024-09-18T01:55:04.727447+00:00	PostgreSQL Importer	Fixing	VCID-h44v-ttyu-aaaf	https://www.postgresql.org/support/security/CVE-2005-1410	34.0.1
2024-01-03T22:23:59.320663+00:00	PostgreSQL Importer	Fixing	VCID-zxng-yspq-aaak	https://www.postgresql.org/support/security/CVE-2005-0247	34.0.0rc1
2024-01-03T22:23:59.216606+00:00	PostgreSQL Importer	Fixing	VCID-h44v-ttyu-aaaf	https://www.postgresql.org/support/security/CVE-2005-1410	34.0.0rc1
2024-01-03T22:23:02.886151+00:00	PostgreSQL Importer	Fixing	VCID-a57d-1aph-aaam	https://www.postgresql.org/support/security/CVE-2005-1409	34.0.0rc1