CVE-2005-0245

Severity

75%

Complexity

99%

Confidentiality

106%

Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.

CVSS 2.0 Base Score 7.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P).

Overview

Type

PostgreSQL

First reported 20 years ago

2005-02-01 05:00:00

Last updated 7 years ago

2017-10-11 01:29:00

Affected Software

PostgreSQL 7.2

7.2

PostgreSQL 7.2.1

7.2.1

PostgreSQL 7.2.2

7.2.2

PostgreSQL 7.2.3

7.2.3

PostgreSQL 7.2.4

7.2.4

PostgreSQL 7.2.5

7.2.5

PostgreSQL 7.2.6

7.2.6

PostgreSQL 7.2.7

7.2.7

PostgreSQL 7.3

7.3

PostgreSQL 7.3.1

7.3.1

PostgreSQL 7.3.2

7.3.2

PostgreSQL 7.3.3

7.3.3

PostgreSQL 7.3.4

7.3.4

PostgreSQL 7.3.5

7.3.5

PostgreSQL 7.3.6

7.3.6

PostgreSQL 7.3.7

7.3.7

PostgreSQL 7.3.8

7.3.8

PostgreSQL 7.3.9

7.3.9

PostgreSQL PostgreSQL 7.4

7.4

PostgreSQL PostgreSQL 7.4.1

7.4.1

PostgreSQL PostgreSQL 7.4.2

7.4.2

PostgreSQL PostgreSQL 7.4.3

7.4.3

PostgreSQL PostgreSQL 7.4.4

7.4.4

PostgreSQL PostgreSQL 7.4.5

7.4.5

PostgreSQL PostgreSQL 7.4.6

7.4.6

PostgreSQL PostgreSQL 7.4.7

7.4.7

PostgreSQL 8.0

8.0

References

[pgsql-committers] 20050121 pgsql: Prevent overrunning a heap-allocated buffer is more than 1024

Vendor Advisory

[pgsql-committers] 20050207 pgsql: Prevent 4 more buffer overruns in the PL/PgSQL parser.