CVE-2009-2356: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used, might allow remote attackers to execute arbitrary code via input to the 1 POP3, 2 SMTP, or 3 web component that triggers a long SQL query...