« Volver al listado

CVE-2002-1398

Estado: ModificadaMedia (4.6)—

Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability "in handling long datetime input."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Postgresql — Postgresql

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-1398",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2003-01-17T05:00:00.000",
  "references": [
    {
      "url": "http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=102978152712430&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=102996089613404&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=103021186622725&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=103036987114437&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=postgresql-announce&m=103062536330644",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/8034",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2002/dsa-165",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2002_038_postgresql.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2003-001.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=102978152712430&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=102996089613404&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=103021186622725&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=103036987114437&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=postgresql-announce&m=103062536330644",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/8034",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2002/dsa-165",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2002_038_postgresql.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2003-001.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability \"in handling long datetime input.\""
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en el procesador de fechas de PostgreSQL 7.2.2 permite a atacantes causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante una cadena de fecha larga."
    }
  ],
  "lastModified": "2026-06-16T21:59:15.317",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:postgresql:postgresql:6.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF7D1F6F-044C-478D-991D-D70281FD7C87"
            },
            {
              "criteria": "cpe:2.3:a:postgresql:postgresql:6.5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6EB98484-1234-4BA2-ACB0-28F4BE684D92"
            },
            {
              "criteria": "cpe:2.3:a:postgresql:postgresql:7.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E7C5056-E280-4BD3-9924-2345B0B82776"
            },
            {
              "criteria": "cpe:2.3:a:postgresql:postgresql:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0D16C66-3688-4CF1-8788-F7D7766F04F9"
            },
            {
              "criteria": "cpe:2.3:a:postgresql:postgresql:7.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F520EC9F-7B20-4108-B3DC-ABF4947A2D6D"
            },
            {
              "criteria": "cpe:2.3:a:postgresql:postgresql:7.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78D324E1-A723-4ECC-A58F-660A5125FD05"
            },
            {
              "criteria": "cpe:2.3:a:postgresql:postgresql:7.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9F8CB95-DCEE-49C9-8985-E39E8E0498BE"
            },
            {
              "criteria": "cpe:2.3:a:postgresql:postgresql:7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95E0614E-0911-43EE-9F3D-2CF87E0F1851"
            },
            {
              "criteria": "cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFF09CFB-F7CE-4659-BB20-83231539F765"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}