ID:11706 - Exploit for Input validation error in PostgreSQL - CVE-2000-1199

 
Main Vulnerability Database Exploits ID:11706 - Exploit for Input validation error in PostgreSQL - CVE-2000-1199

ID:11706 - Exploit for Input validation error in PostgreSQL - CVE-2000-1199

Published: June 23, 2025


Vulnerability identifier: #VU111806
Vulnerability risk: Low
CVE-ID: CVE-2000-1199
CWE-ID: CWE-20
Exploitation vector: Local access
Vulnerable software:
PostgreSQL

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to read and manipulate data.

PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases.


Remediation

Install update from vendor's website.