CVE-2002-1401

Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow.

Date published : 2003-01-08

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524

http://www.debian.org/security/2002/dsa-165