TROYANOSYVIRUS
Volver a CVEs

CVE-2005-0247

N/A

Descripcion

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.

Detalles CVE

Puntuacion CVSS v3.1N/A
Publicado5/2/2005
Ultima modificacion4/16/2026
Fuentenvd
Avistamientos honeypot0

Productos afectados

postgresql:postgresql

Debilidades (CWE)

CWE-119

Referencias

http://marc.info/?l=bugtraq&m=110806034116082&w=2(af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2005/dsa-683(af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200502-19.xml(af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2005-138.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2005-150.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/12417(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.