CVE-2002-1397: Buffer Overflow
Published Jan 8, 2003
·Updated
Vulnerability in the cashwords() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.
Affected Software
8 affected components
PostgreSQL postgresql=7.2
PostgreSQL postgresql=6.3.2
PostgreSQL postgresql=7.1.1
PostgreSQL postgresql=7.1.3
PostgreSQL postgresql=7.0.3
PostgreSQL postgresql=7.1
PostgreSQL postgresql=6.5.3
PostgreSQL postgresql=7.1.2
Event History
Jan 8, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1397?
CVE-2002-1397 has a high severity level due to its potential to cause a denial of service and execute arbitrary code.
2
How do I fix CVE-2002-1397?
To mitigate CVE-2002-1397, upgrade PostgreSQL to version 7.3 or later, where the vulnerability has been addressed.
3
Who is affected by CVE-2002-1397?
CVE-2002-1397 affects local users of PostgreSQL version 7.2 and earlier.
4
What is the impact of CVE-2002-1397?
The impact of CVE-2002-1397 includes potential denial of service and arbitrary code execution risks.
5
What versions of PostgreSQL are vulnerable to CVE-2002-1397?
Vulnerable versions to CVE-2002-1397 include PostgreSQL 7.2, 7.1.x, and 6.5.3 and earlier.