CVE-2002-1399 Integer overflow in n/a

Critical 10.0 Published 8 Jan 2003 Updated 8 Aug 2024

An integer overflow in PostgreSQL's cash_out function allows attackers to cause unexpected behavior via invalid input, requiring a version upgrade to fix.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2002-1399?

CVE-2002-1399 is a critical vulnerability in Postgresql Postgresql, published on 8 Jan 2003. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, based on an invalid integer input which is processed as a different data type, as demonstrated using cash_out(2).

Which versions are affected by CVE-2002-1399?

It affects 1 product.

Products include Postgresql Postgresql.

How do I fix CVE-2002-1399?

No fix has been published for CVE-2002-1399 yet. Limit exposure of the affected software until one is available.

Is CVE-2002-1399 being exploited?

There is no known exploitation of CVE-2002-1399 in the wild and no public exploit code.

All Postgresql Postgresql vulnerabilities

Sources

Also known as GHSA-927w-qm35-gg94.