PostgreSQL 7.0.3

The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server.

Published: 2007-02-06T01:00:00.000Z
Updated: 2024-08-07T12:19:30.527Z

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."

Published: 2006-10-26T17:00:00.000Z
Updated: 2024-08-07T19:55:53.447Z

Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local users to cause a denial of service and possibly execute arbitrary code.

Published: 2003-01-08T05:00:00.000Z
Updated: 2024-08-08T03:26:27.545Z

Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow.

Published: 2003-01-08T05:00:00.000Z
Updated: 2024-08-08T03:26:27.526Z

Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary code by causing repeat() to generate a large string.

Published: 2003-01-08T05:00:00.000Z
Updated: 2024-08-08T03:19:28.947Z