CVE-2002-0972

2002-09-2404:00:00

[email protected]

web.nvd.nist.gov

cve-2002-0972

buffer overflow

postgresql 7.2

denial of service

arbitrary code execution

nvd.

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.2%

JSON

Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to the functions (1) lpad or (2) rpad.

Affected configurations

NVD

Node

postgresqlpostgresqlMatch6.3.2

postgresqlpostgresqlMatch6.5.3

postgresqlpostgresqlMatch7.1

postgresqlpostgresqlMatch7.1.1

postgresqlpostgresqlMatch7.1.2

postgresqlpostgresqlMatch7.2

postgresqlpostgresqlMatch7.2.1

CPENameOperatorVersion
postgresql:postgresqlpostgresqleq6.3.2
postgresql:postgresqlpostgresqleq6.5.3
postgresql:postgresqlpostgresqleq7.1
postgresql:postgresqlpostgresqleq7.1.1
postgresql:postgresqlpostgresqleq7.1.2
postgresql:postgresqlpostgresqleq7.2
postgresql:postgresqlpostgresqleq7.2.1

CPE	Name	Operator	Version
postgresql:postgresql	postgresql	eq	6.3.2
postgresql:postgresql	postgresql	eq	6.5.3
postgresql:postgresql	postgresql	eq	7.1
postgresql:postgresql	postgresql	eq	7.1.1
postgresql:postgresql	postgresql	eq	7.1.2
postgresql:postgresql	postgresql	eq	7.2
postgresql:postgresql	postgresql	eq	7.2.1