CVE-2002-0972: Buffer Overflow
Published Aug 23, 2002
·Updated
Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to the functions (1) lpad or (2) rpad.
Affected Software
7 affected components
PostgreSQL postgresql=6.3.2
PostgreSQL postgresql=6.5.3
PostgreSQL postgresql=7.1
PostgreSQL postgresql=7.1.1
PostgreSQL postgresql=7.1.2
PostgreSQL postgresql=7.2
PostgreSQL postgresql=7.2.1
Event History
Aug 23, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0972?
CVE-2002-0972 has a medium severity level as it can lead to denial of service and potential arbitrary code execution.
2
How do I fix CVE-2002-0972?
To mitigate CVE-2002-0972, upgrade PostgreSQL to a version newer than 7.2 that contains the necessary security fixes.
3
What are the affected versions for CVE-2002-0972?
CVE-2002-0972 affects PostgreSQL versions 7.2 and earlier, as well as certain 6.x and 7.1.x versions.
4
What type of vulnerability is CVE-2002-0972?
CVE-2002-0972 is classified as a buffer overflow vulnerability.
5
What functions are associated with CVE-2002-0972?
CVE-2002-0972 is associated with the lpad and rpad functions in PostgreSQL.