CVE-2005-0245
PostgreSQL < 7.3.10 - Heap-Based Buffer Overflow via Refcursor Function Arguments
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-0245. PoCs published by ChoiX.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in PostgreSQL <=8.0.1 by creating a malicious PL/pgSQL function with an excessive number of variables, leading to a denial-of-service (DoS) condition. The exploit requires authentication and the plpgsql language to be enabled.
Description
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
Exploits (1)
This exploit targets a buffer overflow vulnerability in PostgreSQL <=8.0.1 by creating a malicious PL/pgSQL function with an excessive number of variables, leading to a denial-of-service (DoS) condition. The exploit requires authentication and the plpgsql language to be enabled.