VDB
CVE-2005-1410
CVE-2005-1410
PUBLISHED
CVSS 2.0999999046325684 LOW
The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.
EPSS 0.40% · 33.4th percentile
Risk Scores
CVSS 2.0
2.0999999046325684
EPSS Score
0.40%
33.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| trustix | secure_linux | 2.0 |
| PostgreSQL | PostgreSQL | |
| postgresql | postgresql | 7.4.3, 7.4.5, 7.4.6 |
| n/a | n/a | n/a |
Timeline
- May 3, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 26, 2023 EPSS Score
References
- RHSA-2005:433 vendor-advisory
- ADV-2005-0453 vdb
- oval:org.mitre.oval:def:1086 vdb
- http://www.postgresql.org/about/news.315 url
- http://www.gentoo.org/security/en/glsa/glsa-200505-12.xml advisory
- https://nvd.nist.gov/vuln/detail/CVE-2005-1410 advisory
- http://www.novell.com/linux/security/advisories/2005_36_sudo.html url
- http://www.securityfocus.com/archive/1/426302/30/6680/threaded url
- http://www.securityfocus.com/bid/13475 patch
- http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9343 technical