CVE

Id
5786  
CVE No.
CVE-2002-1402  
Status
Candidate  
Description
Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local users to cause a denial of service and possibly execute arbitrary code.  
Phase
Modified (20071113)  
Votes
ACCEPT(2) Armstrong, Green | MODIFY(1) Cox | NOOP(1) Cole  
Comments
Cox> Addref: RHSA-2003:010 | Addref: RHSA-2003:001 | Addref: RHSA-2002:301  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
32517 5786 CVE-2002-1402 BUGTRAQ:20020824 Fwd: [GENERAL] PostgreSQL 7.2.2: Security Release  View
32518 5786 CVE-2002-1402 URL:http://marc.info/?l=bugtraq&m=103021186622725&w=2  View
32519 5786 CVE-2002-1402 MLIST:[pgsql-announce] 20020824 PostgreSQL 7.2.2: Security Release  View
32520 5786 CVE-2002-1402 URL:http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php  View
32521 5786 CVE-2002-1402 CONECTIVA:CLA-2002:524  View
32522 5786 CVE-2002-1402 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524  View
32523 5786 CVE-2002-1402 DEBIAN:DSA-165  View
32524 5786 CVE-2002-1402 URL:http://www.debian.org/security/2002/dsa-165  View
32525 5786 CVE-2002-1402 MANDRAKE:MDKSA-2002:062  View
32526 5786 CVE-2002-1402 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2002:062  View
32527 5786 CVE-2002-1402 REDHAT:RHSA-2003:001  View
32528 5786 CVE-2002-1402 URL:http://www.redhat.com/support/errata/RHSA-2003-001.html  View
32529 5786 CVE-2002-1402 SUSE:SuSE-SA:2002:038  View
32530 5786 CVE-2002-1402 BUGTRAQ:20020826 GLSA: PostgreSQL  View
32531 5786 CVE-2002-1402 URL:http://marc.info/?l=bugtraq&m=103036987114437&w=2  View
32532 5786 CVE-2002-1402 SECUNIA:8034  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63868 JVNDB-2002-000195 PostgreSQL の TZ および SET TIME ZONE 環境変数におけるバッファオーバーフローの脆弱性 ------------ CVE-2002-1402 5786 4.6 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000195.html  View