Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PostgreSQL多个远程漏洞
Vulnerability Description
PostgreSQL 8.0.1及更早版本中的gram.y存在多个缓冲区溢出,攻击者可以通过(1)由read_sql_construct函数处理的SQL语句中的大量的变量, (2)由make_select_stmta函数处理的SELECT语句中的大量INTO变量,(3)由make_select_stmt函数处理的SELECT语句中的大量任意变量,以及(4)由make_fetch_stmt函数处理的FETCH语句中的大量INTO变量,来执行任意代码,是和CVE-2005-0245不同的一组漏洞。
CVSS Information
N/A
Vulnerability Type
N/A