Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to the functions (1) lpad or (2) rpad.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Postgresql | Postgresql | 6.3.2 (including) | 6.3.2 (including) |
| Postgresql | Postgresql | 6.5.3 (including) | 6.5.3 (including) |
| Postgresql | Postgresql | 7.1 (including) | 7.1 (including) |
| Postgresql | Postgresql | 7.1.1 (including) | 7.1.1 (including) |
| Postgresql | Postgresql | 7.1.2 (including) | 7.1.2 (including) |
| Postgresql | Postgresql | 7.2 (including) | 7.2 (including) |
| Postgresql | Postgresql | 7.2.1 (including) | 7.2.1 (including) |
| Red Hat Enterprise Linux AS (Advanced Server) version 2.1 | RedHat | * | |
| Red Hat Linux 6.2 | RedHat | * | |
| Red Hat Linux 7.0 | RedHat | * | |
| Red Hat Linux 7.1 | RedHat | * | |
| Red Hat Linux 7.2 | RedHat | * | |
| Red Hat Linux 7.3 | RedHat | * | |
| Red Hat Linux 8.0 | RedHat | * | |
| Red Hat Linux Advanced Workstation 2.1 | RedHat | * |
References
- http://marc.info/?l=bugtraq\u0026m=102987608300785\u0026w=2
- http://secunia.com/advisories/8034
- http://www.redhat.com/support/errata/RHSA-2003-001.html
- http://marc.info/?l=bugtraq\u0026m=102987608300785\u0026w=2
- http://secunia.com/advisories/8034
- http://www.redhat.com/support/errata/RHSA-2003-001.html