CVE-2005-0227

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 7.2.x through 7.4.x PostgreSQL (affected versions not specified)

Description The issue allows local users to load arbitrary shared libraries and execute code via the LOAD extension. Any database user is permitted to load arbitrary shared libraries using the LOAD command. A valid login is required to exploit this issue.

Recommendations For versions 7.2.x through 7.4.x, consider restricting access to the LOAD command to prevent arbitrary shared library loading. As a temporary workaround, consider disabling the LOAD extension until a patch is available. Restrict database user permissions to minimize the risk of exploitation.