PT-2003-1948 · Postgresql · Postgresql

Published 2003-10-30 · Updated 2008-09-05 · CVE-2003-0901

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 7.2.x through 7.3.3

Description A buffer overflow issue in the to ascii function allows remote attackers to execute arbitrary code.

Recommendations For PostgreSQL versions 7.2.x through 7.3.3, update to version 7.3.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2003-0901

DSA-397

Affected Products

Postgresql

References · 8

• http://securityfocus.com/bid/8741 · Vendor Advisory
• http://debian.org/security/2003/dsa-397 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000784 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-314.html · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000772 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0901 · Security Note
• http://redhat.com/support/errata/RHSA-2003-313.html · Vendor Advisory
• http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/ascii.c · Note