NVD

Id
66009  
Name
CVE-2005-0245  
Description
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-02-01  
Modified Date
2017-07-10  
Seq
2005-0245  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
343928 66009 CVE-2005-0245 [pgsql-committers] 20050121 pgsql: Prevent overrunning a heap-allocated buffer is more than 1024  View
343929 66009 CVE-2005-0245 [pgsql-committers] 20050207 pgsql: Prevent 4 more buffer overruns in the PL/PgSQL parser.  View
343930 66009 CVE-2005-0245 [pgsql-patches] 20050120 Re: WIP: pl/pgsql cleanup  View
343931 66009 CVE-2005-0245 20050210 [USN-79-1] PostgreSQL vulnerabilities  View
343932 66009 CVE-2005-0245 oval:org.mitre.oval:def:10175  View
343933 66009 CVE-2005-0245 DSA-683  View
343934 66009 CVE-2005-0245 MDKSA-2005:040  View
343935 66009 CVE-2005-0245 SUSE-SA:2005:036  View
343936 66009 CVE-2005-0245 RHSA-2005:138  View
343937 66009 CVE-2005-0245 RHSA-2005:150  View
343938 66009 CVE-2005-0245 12417  View
343939 66009 CVE-2005-0245 postgresql-cursor-bo(19188)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61877 JVNDB-2005-000079 PostgreSQL の gram.y におけるヒープオーバーフローの脆弱性 PostgreSQL には、refcursor() 関数 (gram.y) の引数の取り扱いに不備があり、ヒープベースのバッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-0245 11449 CVE-2005-0245 66009 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000079.html 2005-02-01 2008-02-26 View