CVE-2002-1400

Heap-based buffer overflow in the repeat function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary code by causing repeat to generate a large string...

CVE-2002-1657

PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack...

CVE-2002-1642

PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log pgclog data and cause a denial of service data loss via the VACUUM command...

@(#)Mordred Labs advisory 0x0004: Multiple buffer overflows in PostgreSQL.

//@ Mordred Labs advisory 0x0004 Release data: 20/08/02 Name: Two buffer overflows in PostgreSQL Versions affected: all versions Conditions: multibyte support Risk: average -- Description: I guess all of you already hear about the PostgreSQL. If not, try to visit...

CVE-2002-0802

The multibyte support in PostgreSQL 6.5.x with SQLASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks...

CVE-2001-0201

The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program...

Postaci allows arbitrary SQL query execution

Popular webmail software Postaci ships with Debian lacks of checking for malicious SQL code in variables coming from user while deleting addressbook contacts, bookmarks and notes. This gives opportunity to malicious user to execute arbitrary SQL query. The problem affects Postaci if using...