CVE-2002-1399: Critical severity PostgreSQL postgresql vulnerability
Published Jan 8, 2003
·Updated
Unknown vulnerability in cashout and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, based on an invalid integer input which is processed as a different data type, as demonstrated using cashout(2).
Affected Software
9 affected components
PostgreSQL postgresql=7.2
PostgreSQL postgresql=6.3.2
PostgreSQL postgresql=7.1.1
PostgreSQL postgresql=7.1.3
PostgreSQL postgresql=7.0.3
PostgreSQL postgresql=7.1
PostgreSQL postgresql=6.5.3
PostgreSQL postgresql=7.2.1
PostgreSQL postgresql=7.1.2
Event History
Jan 8, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1399?
The severity of CVE-2002-1399 is currently unknown due to limited information on its impact.
2
What versions are affected by CVE-2002-1399?
CVE-2002-1399 affects PostgreSQL versions 6.3.2, 7.0.3, 7.1.x, and 7.2.1 and possibly earlier versions.
3
How do I fix CVE-2002-1399?
To fix CVE-2002-1399, upgrade PostgreSQL to version 7.2.3 or later.
4
What are the functions involved in CVE-2002-1399?
The functions involved in CVE-2002-1399 include cash_out and possibly other functions in PostgreSQL.
5
Can CVE-2002-1399 affect later versions of PostgreSQL?
Yes, CVE-2002-1399 may affect later versions of PostgreSQL prior to 7.2.3.