Upstream information
Description
PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
National Vulnerability Database | |
---|---|
Base Score | 7.5 |
Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Access Vector | Network |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Partial |
Integrity Impact | Partial |
Availability Impact | Partial |
SUSE Security Advisories:
- SUSE-SA:2005:036, published Fri, 24 Jun 2005 12:01:00
- SUSE-SR:2005:013, published Wed, 18 May 2005 15:00:00 +0000
- SUSE-SR:2005:014, published Tue, 07 Jun 2005 14:00:00 +0000
- SUSE-SR:2005:015, published Tue, 07 Jun 2005 12:00:00 +0000
- SUSE-SR:2005:016, published Fri, 17 Jun 2005 14:00:00 +0000
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 01:18:10 2013CVE page last modified: Fri Dec 8 16:12:26 2023