PostgreSQL PL/Java prior to 1.5.0 allows remote authenticated users to alter type mappings for types they do not own.
pl\\/java project pl\\/java