PT-2005-1327 · Postgresql+1 · Postgresql+1
Neil Conway
·
Publicado
2005-02-08
·
Atualizado
2017-10-11
·
CVE-2005-0247
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
PostgreSQL versions 8.0.1 and earlier
Description
The issue is related to multiple buffer overflows in the gram.y file for PostgreSQL, which may allow attackers to execute arbitrary code. This can occur through various means, including a large number of variables in a SQL statement handled by the
read sql construct function, a large number of INTO variables in a SELECT statement handled by the make select stmt function, a large number of arbitrary variables in a SELECT statement handled by the make select stmt function, and a large number of INTO variables in a FETCH statement handled by the make fetch stmt function. A valid login is required to exploit this issue.Recommendations
For PostgreSQL versions 8.0.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Postgresql
Red Hat