Home > Vulnerability Database > CVE-2005-0227

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2005-0227

Date: February 6, 2005

PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension.

Severity Score

5.3

Related Resources (16)

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2005:040

Url: http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php

Url: https://nvd.nist.gov/vuln/detail/CVE-2005-0227

Url: http://www.debian.org/security/2005/dsa-668

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10234

Url: http://security.gentoo.org/glsa/glsa-200502-08.xml

Url: http://www.novell.com/linux/security/advisories/2005_36_sudo.html

Url: http://marc.info/?l=bugtraq&m=110726899107148&w=2

Url: http://www.trustix.org/errata/2005/0003/

Url: http://www.securityfocus.com/bid/12411

Url: http://www.redhat.com/support/errata/RHSA-2005-138.html

Url: http://www.redhat.com/support/errata/RHSA-2005-150.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2005-0227

Url: http://archives.postgresql.org/pgsql-announce/2005-02/msg00000.php

Url: http://secunia.com/advisories/12948

Url: https://www.mend.io/vulnerability-database/CVE-2005-0227

Severity Score

5.3

Weakness Type (CWE)

Improper Control of Generation of Code ('Code Injection')

CWE-94

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	4.3
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	SINGLE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us