PT-2002-1018 · Postgresql · Postgresql

Publicado

2002-09-24

·

Atualizado

2016-10-18

·

CVE-2002-1398

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 7.2.2
Description The issue concerns a buffer overflow in the date parser, which can be exploited remotely. This can lead to a denial of service and potentially allow the execution of arbitrary code via a long date string. The vulnerability affects the handling of long datetime input.
Recommendations For versions prior to 7.2.2, update to version 7.2.2 or later to resolve the issue. As a temporary workaround, consider restricting input to the date parser to prevent exploitation until a patch is applied.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-03115
CVE-2002-1398
DSA-165

Produtos afetados

Postgresql