First published: Fri Aug 23 2002(Updated: )
Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to the functions (1) lpad or (2) rpad.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
PostgreSQL JDBC Driver | =7.2 | |
PostgreSQL JDBC Driver | =6.3.2 | |
PostgreSQL JDBC Driver | =7.1.1 | |
PostgreSQL JDBC Driver | =7.1 | |
PostgreSQL JDBC Driver | =6.5.3 | |
PostgreSQL JDBC Driver | =7.2.1 | |
PostgreSQL JDBC Driver | =7.1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0972 has a medium severity level as it can lead to denial of service and potential arbitrary code execution.
To mitigate CVE-2002-0972, upgrade PostgreSQL to a version newer than 7.2 that contains the necessary security fixes.
CVE-2002-0972 affects PostgreSQL versions 7.2 and earlier, as well as certain 6.x and 7.1.x versions.
CVE-2002-0972 is classified as a buffer overflow vulnerability.
CVE-2002-0972 is associated with the lpad and rpad functions in PostgreSQL.