CVE-2002-0972

PostgreSQL 7.2 - Buffer Overflow via lpad or rpad Function Arguments

Title source: llm

Description

Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to the functions (1) lpad or (2) rpad.

References (3)

Core 3

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/8034

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=102987608300785&w=2

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2003-001.html

Scores

EPSS 0.0010

EPSS Percentile 27.1%

Details

Status published

Products (7)

postgresql/postgresql 6.3.2

postgresql/postgresql 6.5.3

postgresql/postgresql 7.1

postgresql/postgresql 7.1.1

postgresql/postgresql 7.1.2

postgresql/postgresql 7.2

postgresql/postgresql 7.2.1

Published Sep 24, 2002

Tracked Since Feb 18, 2026