CVE-2005-0244: PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by usi...

Security readout for executives and security teams

This older PostgreSQL flaw lets a local or authenticated database user bypass function EXECUTE restrictions through aggregate creation. The business risk is mainly in legacy systems where untrusted users can access the database. Modern supported PostgreSQL deployments are unlikely to be affected, but old embedded, appliance, or forgotten servers should be checked. Exposure is most plausible on obsolete PostgreSQL 8.0.0 or earlier installations, especially where non-administrative local or database users can connect and create database objects. Internet exposure is not indicated by the source bundle. Prioritize as a legacy exposure cleanup item unless a business-critical system still runs PostgreSQL 8.0.0 or earlier with shared or untrusted database access. In that case, treat remediation as urgent because permission boundaries inside the database may not hold. Mitigation focus: Identify and retire PostgreSQL 8.0.0 or earlier installations.; Apply relevant vendor PostgreSQL security updates from supported distribution channels.; Restrict untrusted database users from creating database objects until patched..

Prepared

Jun 30, 2026, 01:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.