CVE

Id
5781  
CVE No.
CVE-2002-1397  
Status
Candidate  
Description
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.  
Phase
Modified (20071113)  
Votes
ACCEPT(2) Armstrong, Green | MODIFY(1) Cox | NOOP(1) Cole  
Comments
Cox> Addref: RHSA-2003:010 | Addref: RHSA-2003:001 | Addref: RHSA-2002:301  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
32459 5781 CVE-2002-1397 BUGTRAQ:20020819 @(#) Mordred Labs advisory 0x0001: Buffer overflow in PostgreSQL  View
32460 5781 CVE-2002-1397 URL:http://marc.info/?l=bugtraq&m=102977465204357&w=2  View
32461 5781 CVE-2002-1397 MISC:http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/cash.c.diff?r1=1.51&r2=1.52  View
32462 5781 CVE-2002-1397 CONECTIVA:CLA-2002:524  View
32463 5781 CVE-2002-1397 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524  View
32464 5781 CVE-2002-1397 REDHAT:RHSA-2003:001  View
32465 5781 CVE-2002-1397 URL:http://www.redhat.com/support/errata/RHSA-2003-001.html  View
32466 5781 CVE-2002-1397 BID:5497  View
32467 5781 CVE-2002-1397 URL:http://www.securityfocus.com/bid/5497  View
32468 5781 CVE-2002-1397 SECUNIA:8034  View
32469 5781 CVE-2002-1397 URL:http://secunia.com/advisories/8034  View
32470 5781 CVE-2002-1397 XF:postgresql-cashwords-bo(9891)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63871 JVNDB-2002-000198 PostgreSQL の cash_words() 関数におけるバッファオーバーフローの脆弱性 PostgreSQL の cash_words() 関数には、クエリの取り扱いに不備が存在し、cash_words() 関数に異常に大きいクエリが引き渡すことにより、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-1397 5781 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000198.html  View