CVE-2005-0244

PostgreSQL <= 8.0.0 - Unauthenticated Permission Bypass via CREATE AGGREGATE Command

Title source: llm

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

Vendor Advisory vendor-advisory x_refsource_mandrake

Mailing List mailing-list x_refsource_bugtraq

Patch, Vendor Advisory vendor-advisory x_refsource_redhat

Vendor Advisory mailing-list x_refsource_mlist

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

Vendor Advisory vendor-advisory x_refsource_suse

EPSS 0.0084

EPSS Percentile 74.9%

CWE

CWE-264

Status published

Products (27)

postgresql/postgresql 7.2

postgresql/postgresql 7.2.1

postgresql/postgresql 7.2.2

postgresql/postgresql 7.2.3

postgresql/postgresql 7.2.4

postgresql/postgresql 7.2.5

postgresql/postgresql 7.2.6

postgresql/postgresql 7.2.7

postgresql/postgresql 7.3

postgresql/postgresql 7.3.1

... and 17 more

Published May 02, 2005

Tracked Since Feb 18, 2026