First published: Wed Jan 08 2003(Updated: )
Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, based on an invalid integer input which is processed as a different data type, as demonstrated using cash_out(2).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
PostgreSQL JDBC Driver | =7.2 | |
PostgreSQL JDBC Driver | =6.3.2 | |
PostgreSQL JDBC Driver | =7.1.1 | |
PostgreSQL JDBC Driver | =7.1.3 | |
PostgreSQL JDBC Driver | =7.0.3 | |
PostgreSQL JDBC Driver | =7.1 | |
PostgreSQL JDBC Driver | =6.5.3 | |
PostgreSQL JDBC Driver | =7.2.1 | |
PostgreSQL JDBC Driver | =7.1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2002-1399 is currently unknown due to limited information on its impact.
CVE-2002-1399 affects PostgreSQL versions 6.3.2, 7.0.3, 7.1.x, and 7.2.1 and possibly earlier versions.
To fix CVE-2002-1399, upgrade PostgreSQL to version 7.2.3 or later.
The functions involved in CVE-2002-1399 include cash_out and possibly other functions in PostgreSQL.
Yes, CVE-2002-1399 may affect later versions of PostgreSQL prior to 7.2.3.