CVE-2002-1401: Buffer Overflow

Published Jan 8, 2003

Updated

Buffer overflows in (1) circlepoly, (2) pathencode and (3) pathadd (also incorrectly identified as pathaddr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow.

Affected Software

11 affected components

PostgreSQL postgresql=7.2

PostgreSQL postgresql=6.3.2

PostgreSQL postgresql=7.2.3

PostgreSQL postgresql=7.1.1

PostgreSQL postgresql=7.1.3

PostgreSQL postgresql=7.0.3

PostgreSQL postgresql=7.1

PostgreSQL postgresql=7.2.2

PostgreSQL postgresql=6.5.3

PostgreSQL postgresql=7.2.1

PostgreSQL postgresql=7.1.2

Remediation

Patch Available

http://www.debian.org/security/2002/dsa-165

Event History

Jan 8, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1401?

CVE-2002-1401 has a high severity due to its potential to cause denial of service and possibly execute arbitrary code.

How do I fix CVE-2002-1401?

To fix CVE-2002-1401, upgrade PostgreSQL to version 7.3 or later, where this vulnerability is addressed.

Which versions of PostgreSQL are affected by CVE-2002-1401?

CVE-2002-1401 affects PostgreSQL versions 7.2.3 and earlier, including 7.2.2 and 7.1.x versions.

What type of vulnerability is CVE-2002-1401?

CVE-2002-1401 is a buffer overflow vulnerability that can lead to denial of service and may allow for arbitrary code execution.

Is CVE-2002-1401 a critical vulnerability?

Yes, CVE-2002-1401 is considered critical due to its severe impact on system stability and security.