PostgreSQL To_Ascii() Buffer Overflow Vulnerability

BID:8741

Info

PostgreSQL To_Ascii() Buffer Overflow Vulnerability

Bugtraq ID: 8741
Class: Boundary Condition Error
CVE: CVE-2003-0901
Remote: Yes
Local: No
Published: Aug 24 2003 12:00AM
Updated: Jul 11 2009 11:56PM
Credit: Discovery of this vulnerability has been credited to Tom Lane.
Vulnerable: Turbolinux Turbolinux Desktop 10.0
SGI ProPack 2.3
SGI ProPack 2.2.1
Redhat Enterprise Linux WS 2.1
Redhat Enterprise Linux ES 2.1
Redhat Enterprise Linux AS 2.1
Redhat Advanced Workstation for the Itanium Processor 2.1
PostgreSQL PostgreSQL 7.3.3
+ OpenPKG OpenPKG Current
 PostgreSQL PostgreSQL 7.3.2
PostgreSQL PostgreSQL 7.3.1
+ OpenPKG OpenPKG 1.2
PostgreSQL PostgreSQL 7.3
PostgreSQL PostgreSQL 7.2.4
+ Redhat Linux 8.0
+ Redhat Linux 7.3
PostgreSQL PostgreSQL 7.2.3
PostgreSQL PostgreSQL 7.2.2
+ Mandriva Linux Mandrake 9.0
+ Turbolinux Turbolinux Server 8.0
+ Turbolinux Turbolinux Server 7.0
+ Turbolinux Turbolinux Workstation 8.0
PostgreSQL PostgreSQL 7.2.1
+ Debian Linux 3.0 sparc
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 alpha
 + Debian Linux 3.0
+ Gentoo Linux 0.7
+ Gentoo Linux 0.5
PostgreSQL PostgreSQL 7.2
+ Mandriva Linux Mandrake 8.2 ppc
 + Mandriva Linux Mandrake 8.2
+ SuSE Linux 8.0 i386
 + SuSE Linux 8.0
PostgreSQL PostgreSQL 7.1.3
+ Redhat Linux 7.2
+ SuSE Linux 7.3 sparc
 + SuSE Linux 7.3 ppc
 + SuSE Linux 7.3 i386
 + SuSE Linux 7.3
+ Trustix Secure Linux 1.5
+ Trustix Secure Linux 1.2
+ Trustix Secure Linux 1.1
Not Vulnerable: PostgreSQL PostgreSQL 7.3.4
+ OpenPKG OpenPKG Current

Discussion

PostgreSQL To_Ascii() Buffer Overflow Vulnerability

PostgreSQL is reported prone to a buffer overflow vulnerability, which presents itself in the PostgreSQL to_ascii() function. The to_ascii() function is normally used to convert text from multibyte encoding format to ASCII.

It has been conjectured that excessive data passed to the to_ascii() function may overrun the bounds of an insufficient buffer reserved in heap based memory. This may result in the corruption of heap based memory management structures that are adjacent to the affected buffer. Although unconfirmed, it is currently believed that under the correct circumstances an attacker may leverage this condition to execute arbitrary instructions in the context of the affected service.

Other ADT (abstract data type) to_ascii_xxx() conversion functions are similarly affected.

Exploit / POC

PostgreSQL To_Ascii() Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

PostgreSQL To_Ascii() Buffer Overflow Vulnerability

Solution:
Turbolinux have released an advisory (TLSA-2003-62) to address this issue. Users who are potentially affected by this vulnerability are advised to apply relative fixes as soon as possible. Further information regarding obtaining and applying these fixes can be found in the referenced advisory.

Conectiva has released an advisory (CLA-2003:784) that addresses this issue on Conectiva Linux systems. Users who are potentially affected by this vulnerability are advised to apply appropriate fixes as soon as possible. Further information pertaining to applying these fixes can be found in the referenced advisory. Fixes are linked below.

Red Hat has released an advisory (RHSA-2003:314-08) that addresses this issue on Red Hat Enterprise edition Linux. Customers who are potentially affected by this vulnerability are advised to apply appropriate fixes as soon as possible. Customers can download these fixes from the Red Hat network; further information is available in the referenced advisory.

OpenPKG has released an advisory that provides fixes for OpenPKG 1.2 and CURRENT. postgresql-7.3.4-20030725 addresses the issue in CURRENT and postgresql-7.3.1-1.2.4 was released to address the issue in version 1.2. Please see the attached advisory for more details.

Mandrake has released an advisory (MDKSA-2003:102) to address this issue. Please see the attached advisory for details.

Debian has issued an advisory (DSA 397-1) and fixes. The advisory is linked to in the reference section of this record.

Red Hat has released an advisory (RHSA-2003:313-00) that addresses this issue. Users who are potentially affected by this vulnerability are advised to apply appropriate fixes as soon as possible. Information on how to obtain and apply these fixes can be found in the attached advisory.

An advisory has been released for Trustix Secure Linux (TSLSA-2003-0040) that includes updates for this issue. Please see the attached advisory for details on obtaining and applying updates.

SGI has released an advisory (20031101-01-U) pertaining to their ProPack Linux distribution. The advisory has been released in response to a number of RHSA advisories, and includes a patch (Patch 10032) containing updated RPM packages relating to a number of different BIDS.

Patch 10032 can be obtained via the following link:
http://support.sgi.com/

For information regarding how to obtain individual RPM packages included in Patch 10032, please see the attached advisory.

The vendor has released an upgrade to address this issue:


Turbolinux Turbolinux Desktop 10.0

PostgreSQL PostgreSQL 7.1.3

PostgreSQL PostgreSQL 7.2

PostgreSQL PostgreSQL 7.2.1

PostgreSQL PostgreSQL 7.2.2

PostgreSQL PostgreSQL 7.2.3

PostgreSQL PostgreSQL 7.2.4

PostgreSQL PostgreSQL 7.3

PostgreSQL PostgreSQL 7.3.1

PostgreSQL PostgreSQL 7.3.2

PostgreSQL PostgreSQL 7.3.3

References

PostgreSQL To_Ascii() Buffer Overflow Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report