Vulnerabilities > Postgresql
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2003-01-17 | CVE-2002-1397 | Buffer Overflow vulnerability in PostgreSQL cash_words Function Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow. | 7.5 |
| 2002-12-31 | CVE-2002-1657 | Use of Password Hash With Insufficient Computational Effort vulnerability in Postgresql 7.3.19 PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack. | 7.5 |
| 2002-10-03 | CVE-2002-1642 | Unspecified vulnerability in Postgresql 7.2/7.2.1/7.2.2 PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log (pg_clog) data and cause a denial of service (data loss) via the VACUUM command. | 7.2 |
| 2002-09-24 | CVE-2002-0972 | Unspecified vulnerability in Postgresql Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to the functions (1) lpad or (2) rpad. | 4.6 |
| 2002-08-12 | CVE-2002-0802 | SQL-Injection vulnerability in Postgresql 6.5.0 The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks. | 7.5 |
| 2001-08-31 | CVE-2000-1199 | Unspecified vulnerability in Postgresql 6.3.2/6.5.3 PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases. | 4.6 |
| 1999-12-02 | CVE-1999-0862 | Unspecified vulnerability in Postgresql 6.3.2/6.5.3/6.5.3.1 Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file. | 2.1 |