PT-2002-1019 · Postgresql+1 · Ecpg+2

Published 2002-09-24 · Updated 2016-10-18 · CVE-2002-1400

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 7.2.2 ecpg (affected versions not specified)

Description The issue concerns multiple vulnerabilities in the ecpg package of Debian GNU/Linux and a heap-based buffer overflow in the repeat() function of PostgreSQL. This can lead to a breach of confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited remotely.

Recommendations For PostgreSQL versions prior to 7.2.2: update to version 7.2.2 or later to resolve the issue. For ecpg: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03115

CVE-2002-1400

DSA-165

Affected Products

Debian

Postgresql

Ecpg

References · 18

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-001.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2002_038_postgresql.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0972 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-1400 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1401 · Security Note
• http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2002:062 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1402 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1400 · Security Note
• https://bdu.fstec.ru/vul/2015-03115 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1398 · Security Note
• http://marc.info/?l=postgresql-announce&m=103062536330644 · Note
• http://debian.org/security/dsa-165 · Note
• http://marc.info/?l=bugtraq&m=103021186622725&w=2 · Note