vendor:
PostgreSQL
by:
Unknown
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: PostgreSQL
Affected Version From: 8.0.23
Affected Version To: Unknown
Patch Exists: YES
Related CWE: CVE-2009-0922
CPE: a:postgresql:postgresql:8.0.23
Metasploit:
https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2009-1484/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2009-1067/, https://www.rapid7.com/db/vulnerabilities/centos_linux-cve-2009-0922/, https://www.rapid7.com/db/vulnerabilities/postgres-cve-2009-0922/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2009-0922/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2009-0922/
Platforms Tested:
Unknown
PostgreSQL Buffer Overflow Vulnerability
PostgreSQL is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code with elevated privileges or crash the affected application.
Mitigation:
Apply the latest security patches provided by the vendor.