CVE

Id
11453  
CVE No.
CVE-2005-0247  
Status
Candidate  
Description
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.  
Phase
Assigned (20050208)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
81752 11453 CVE-2005-0247 MLIST:[pgsql-committers] 20050207 pgsql: Prevent 4 more buffer overruns in the PL/PgSQL parser.  View
81753 11453 CVE-2005-0247 URL:http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php  View
81754 11453 CVE-2005-0247 DEBIAN:DSA-683  View
81755 11453 CVE-2005-0247 URL:http://www.debian.org/security/2005/dsa-683  View
81756 11453 CVE-2005-0247 GENTOO:GLSA-200502-19  View
81757 11453 CVE-2005-0247 URL:http://www.gentoo.org/security/en/glsa/glsa-200502-19.xml  View
81758 11453 CVE-2005-0247 MANDRAKE:MDKSA-2005:040  View
81759 11453 CVE-2005-0247 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:040  View
81760 11453 CVE-2005-0247 REDHAT:RHSA-2005:138  View
81761 11453 CVE-2005-0247 URL:http://www.redhat.com/support/errata/RHSA-2005-138.html  View
81762 11453 CVE-2005-0247 REDHAT:RHSA-2005:150  View
81763 11453 CVE-2005-0247 URL:http://www.redhat.com/support/errata/RHSA-2005-150.html  View
81764 11453 CVE-2005-0247 SUSE:SUSE-SA:2005:027  View
81765 11453 CVE-2005-0247 URL:http://www.novell.com/linux/security/advisories/2005_27_postgresql.html  View
81766 11453 CVE-2005-0247 BUGTRAQ:20050210 [USN-79-1] PostgreSQL vulnerabilities  View
81767 11453 CVE-2005-0247 URL:http://marc.info/?l=bugtraq&m=110806034116082&w=2  View
81768 11453 CVE-2005-0247 SUSE:SUSE-SA:2005:036  View
81769 11453 CVE-2005-0247 URL:http://www.novell.com/linux/security/advisories/2005_36_sudo.html  View
81770 11453 CVE-2005-0247 BID:12417  View
81771 11453 CVE-2005-0247 URL:http://www.securityfocus.com/bid/12417  View
81772 11453 CVE-2005-0247 OVAL:oval:org.mitre.oval:def:9345  View
81773 11453 CVE-2005-0247 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9345  View
81774 11453 CVE-2005-0247 XF:postgresql-fetch-makefetchstmt-bo(19378)  View
81775 11453 CVE-2005-0247 URL:http://xforce.iss.net/xforce/xfdb/19378  View
81776 11453 CVE-2005-0247 XF:postgresql-makeselectstmt-arbitrary-bo(19377)  View
81777 11453 CVE-2005-0247 URL:http://xforce.iss.net/xforce/xfdb/19377  View
81778 11453 CVE-2005-0247 XF:postgresql-makeselectstmt-input-bo(19376)  View
81779 11453 CVE-2005-0247 URL:http://xforce.iss.net/xforce/xfdb/19376  View
81780 11453 CVE-2005-0247 XF:postgresql-readsqlconstruct-bo(19375)  View

Related JVN