FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-0245

This CVE name corresponds to:

Entered	Topic
2006-08-13	postgresql -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-0245 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-0245
Phase	Assigned(20050208)

Description

Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.

References

Source	Reference
MLIST	[pgsql-patches] 20050120 Re: WIP: pl/pgsql cleanup
MLIST	[pgsql-committers] 20050121 pgsql: Prevent overrunning a heap-allocated buffer is more than 1024
MLIST	[pgsql-committers] 20050207 pgsql: Prevent 4 more buffer overruns in the PL/PgSQL parser.
DEBIAN	DSA-683
MANDRAKE	MDKSA-2005:040
REDHAT	RHSA-2005:138
REDHAT	RHSA-2005:150
BUGTRAQ	20050210 [USN-79-1] PostgreSQL vulnerabilities
SUSE	SUSE-SA:2005:036
BID	12417
OVAL	oval:org.mitre.oval:def:10175
SECUNIA	12948
XF	postgresql-cursor-bo(19188)