CVE-2002-1398: Buffer Overflow
Published Jan 8, 2003
·Updated
Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability "in handling long datetime input."
Affected Software
9 affected components
PostgreSQL postgresql=6.3.2
PostgreSQL postgresql=6.5.3
PostgreSQL postgresql=7.0.3
PostgreSQL postgresql=7.1
PostgreSQL postgresql=7.1.1
PostgreSQL postgresql=7.1.2
PostgreSQL postgresql=7.1.3
PostgreSQL postgresql=7.2
PostgreSQL postgresql=7.2.1
Event History
Jan 8, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1398?
CVE-2002-1398 has a high severity due to its potential for denial of service and execution of arbitrary code.
2
How do I fix CVE-2002-1398?
To fix CVE-2002-1398, upgrade PostgreSQL to version 7.2.2 or later.
3
Which versions of PostgreSQL are affected by CVE-2002-1398?
CVE-2002-1398 affects PostgreSQL versions 7.2 and earlier, including 7.1.x and 6.5.x.
4
What kind of attack can exploit CVE-2002-1398?
CVE-2002-1398 can be exploited through sending a long date string to the PostgreSQL date parser.
5
What is the impact of CVE-2002-1398 on PostgreSQL systems?
CVE-2002-1398 can lead to a denial of service and possibly allow attackers to execute arbitrary code on vulnerable PostgreSQL systems.