Lucene search
HistoryJan 17, 2003 - 5:00 a.m.
CVE-2002-1399
postgresql
vulnerability
cash_out
integer input
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.6%
Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, based on an invalid integer input which is processed as a different data type, as demonstrated using cash_out(2).
Affected configurations
Node
postgresqlpostgresqlMatch6.3.2
ORpostgresqlpostgresqlMatch6.5.3
ORpostgresqlpostgresqlMatch7.0.3
ORpostgresqlpostgresqlMatch7.1
ORpostgresqlpostgresqlMatch7.1.1
ORpostgresqlpostgresqlMatch7.1.2
ORpostgresqlpostgresqlMatch7.1.3
ORpostgresqlpostgresqlMatch7.2
ORpostgresqlpostgresqlMatch7.2.1
Related
nvd
nvd
CVE-2002-1399
2003-01-17 05:00:00
cvelist
cvelist
CVE-2002-1399
2003-01-08 05:00:00
nessus
nessus
PostgreSQL < 7.2.3 Multiple Vulnerabilities
2003-03-24 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.6%
Related for CVE-2002-1399