Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Postgresql | Postgresql | 7.3 (including) | 7.3.10 (excluding) |
| Postgresql | Postgresql | 7.4 (including) | 7.4.7 (excluding) |
| Postgresql | Postgresql | 8.0 (including) | 8.0 (including) |
| Red Hat Enterprise Linux 3 | RedHat | rh-postgresql-0:7.3.9-2 | * |
| Red Hat Enterprise Linux 4 | RedHat | postgresql-0:7.4.7-2.RHEL4.1 | * |
| Red Hat Enterprise Linux AS (Advanced Server) version 2.1 | RedHat | * | |
| Red Hat Enterprise Linux ES version 2.1 | RedHat | * | |
| Red Hat Enterprise Linux WS version 2.1 | RedHat | * | |
| Red Hat Linux Advanced Workstation 2.1 | RedHat | * |