PostgreSQL - more buffer overflows [LWN.net]

Package(s): postgresql CVE #(s):

Created: February 12, 2003 Updated: November 7, 2003

Description: A new set of buffer overflows has been discovered in PostgreSQL 7.2.2; they affect the circle_poly(), path_encode(), and path_addr() functions. Exploiting these overflows requires that the attacker first obtain a connection to the PostgreSQL server.

Alerts:

Debian	DSA-397-1	2003-11-07
Immunix	IMNX-2003-7+-005-01	2003-04-08
Trustix	2003-0004	2003-02-20
Mandrake	MDKSA-2002:062-1	2003-02-11

(Log in to post comments)

PostgreSQL - more buffer overflows

Posted Feb 27, 2003 9:42 UTC (Thu) by mjc@redhat.com (guest, #2303) [Link]

This is CAN-2002-1401, also covered by Red Hat advisory RHSA-2003-001