CVE Vulnerabilities

CVE-2005-0245

Published: Feb 01, 2005 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.

Affected Software

NameVendorStart VersionEnd Version
PostgresqlPostgresql7.3 (including)7.3.10 (excluding)
PostgresqlPostgresql7.4 (including)7.4.7 (excluding)
PostgresqlPostgresql8.0 (including)8.0 (including)
Red Hat Enterprise Linux 3RedHatrh-postgresql-0:7.3.9-2*
Red Hat Enterprise Linux 4RedHatpostgresql-0:7.4.7-2.RHEL4.1*
Red Hat Enterprise Linux AS (Advanced Server) version 2.1RedHat*
Red Hat Enterprise Linux ES version 2.1RedHat*
Red Hat Enterprise Linux WS version 2.1RedHat*
Red Hat Linux Advanced Workstation 2.1RedHat*

References