CVE-2009-1341

Memory leak in the dequotebytea function in quote.c in the DBD::Pg aka DBD-Pg or libdbd-pg-perl module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service memory consumption by fetching data with BYTEA columns...

CVE-2009-1341

CVE-2009-1341 (and CVE-2009-0663) affect perl-DBD-Pg (DBD::Pg) prior to 2.0.0, where a memory leak in dequote_bytea (quote.c) can cause DoS via memory exhaustion when fetching BYTEA data. CVE-2009-0663 also describes a heap-based buffer overflow in pg_getline/getline that could allow arbitrary co...

CVE-2009-0663

Heap-based buffer overflow in the DBD::Pg aka DBD-Pg or libdbd-pg-perl module 1.49 for Perl might allow context-dependent attackers to execute arbitrary code via unspecified input to an application that uses the getline and pggetline functions to read database rows...

CVE-2009-1341

Memory leak in the dequotebytea function in quote.c in the DBD::Pg aka DBD-Pg or libdbd-pg-perl module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service memory consumption by fetching data with BYTEA columns...

DBD::Pg BYTEA值内存泄漏拒绝服务漏洞

BUGTRAQ ID: 34757 CVE ID：CVE-2009-1341 DBD::Pg是一款用于PostgreSQL数据库访问的DBI驱动模块。 DBD::Pg从数据中返回的未加引号BYTEA值可导致函数内存泄漏，远程攻击者可以利用漏洞使应用程序崩溃。 目前没有详细漏洞细节提供。 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4...

CVE-2009-0663: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the DBD::Pg aka DBD-Pg or libdbd-pg-perl module 1.49 for Perl might allow context-dependent attackers to execute arbitrary code via unspecified input to an application that uses the getline and pggetline functions to read database rows...

CVE-2009-1341: Exposure of Sensitive Information to an Unauthorized Actor

Memory leak in the dequotebytea function in quote.c in the DBD::Pg aka DBD-Pg or libdbd-pg-perl module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service memory consumption by fetching data with BYTEA columns...

Debian DSA-1780-1 : libdbd-pg-perl - several vulnerabilities

Two vulnerabilities have been discovered in libdbd-pg-perl, the DBI driver module for PostgreSQL database access DBD::Pg. - CVE-2009-0663 A heap-based buffer overflow may allow attackers to execute arbitrary code through applications which read rows from the database using the pggetline and getli...

[SECURITY] [DSA 1780-1] New libdbd-pg-perl packages fix potential code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1780-1 [email protected] http://www.debian.org/security/ Florian Weimer April 28, 2009 http://www.debian.org/security/faq -...

Sql injection

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the pollviewid parameter in a results action...

CVE-2008-6117

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the pollviewid parameter in a results action...

CVE-2008-6117

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the pollviewid parameter in a results action...

CVE-2008-6117

CVE-2008-6117 describes an SQL injection in the PG Job Site Pro product, triggered by the poll_view_id parameter in a results action of homepage.php. The vulnerability allows remote attackers to execute arbitrary SQL commands. Affected component: homepage.php within PG Job Site Pro; root cause is...

CVE-2008-6117: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the pollviewid parameter in a results action...

CVE-2008-5307

SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter username. NOTE: some of these details are obtained from third party information...

CVE-2008-5306

SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter username. NOTE: some of these details are obtained from third party information...

CVE-2008-5306

SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter username. NOTE: some of these details are obtained from third party information...

CVE-2008-5307

SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter. NOTE: some of these details are obtained from third party information...