CVE-2005-0245 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2005-0245
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-0245

Description: Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/19188 SUSE http://www.novell.com/linux/security/advisories/2005_36_sudo.html SAID Secunia Advisory: SA12948 REDHAT http://www.redhat.com/support/errata/RHSA-2005-150.html http://www.redhat.com/support/errata/RHSA-2005-138.html MLIST http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php http://archives.postgresql.org/pgsql-committers/2005-01/msg00298.php http://archives.postgresql.org/pgsql-patches/2005-01/msg00216.php MANDRAKE http://www.mandrakesoft.com/security/advisories?name=MDKSA-2005:040 DEBIAN http://www.debian.org/security/2005/dsa-683 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=110806034116082&w=2 BID 12417

Return to the previous page.