DB: PostgreSQL Bit Substring Buffer Overflow

This signature detects malformed SQL queries within a PostgreSQL request. A buffer overflow vulnerability exists in the PostgreSQL database server. The vulnerability is due to an error when executing the SQL substring function with malicious input. A remote authenticated attacker could leverage this vulnerability by sending a crafted SQL query to a target server. Successful exploitation could lead to the execution of arbitrary code on the target server.

Extended Description

PostgreSQL is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code with elevated privileges or crash the affected application. PostgreSQL 8.0.23 is vulnerable; other versions may also be affected.

Affected Products

Pardus linux_2009

References

BugTraq: 37973

CVE: CVE-2010-0442

Short Name

DB:POSTGRESQL:SUBSTRING-OF

Severity

Major

Recommended

False

Recommended Action

Drop

DB: PostgreSQL Bit Substring Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?