CVE-2003-0901

highPriorität · verfolgen · 32EPSS 0.048 · 92. PerzentilEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

4.75% (92nd) EPSS

CVSS 7.5 · high

Is it mine?

18 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

enisa_euvd · nvd · redhat_csaf

EPSS · bewertet 2026-10-27

Buffer overflow in to_ascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers to execute arbitrary code.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenRed Hat Linux 7.2redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that no initdb will be necessary from previous PostgreSQL packages.
https://access.redhat.com/errata/RHSA-2003:313
BehobenRed Hat Linux 7.3redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that no initdb will be necessary from previous PostgreSQL packages.
https://access.redhat.com/errata/RHSA-2003:313
BehobenRed Hat Linux 8.0redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that no initdb will be necessary from previous PostgreSQL packages.
https://access.redhat.com/errata/RHSA-2003:313
BehobenRed Hat Linux 9redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that no initdb will be necessary from previous PostgreSQL packages.
https://access.redhat.com/errata/RHSA-2003:313
BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that no initdb will be necessary from previous PostgreSQL packages.
https://access.redhat.com/errata/RHSA-2003:314
BehobenRed Hat Enterprise Linux ES version 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that no initdb will be necessary from previous PostgreSQL packages.
https://access.redhat.com/errata/RHSA-2003:314
BehobenRed Hat Enterprise Linux WS version 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that no initdb will be necessary from previous PostgreSQL packages.
https://access.redhat.com/errata/RHSA-2003:314
BehobenRed Hat Linux Advanced Workstation 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that no initdb will be necessary from previous PostgreSQL packages.
https://access.redhat.com/errata/RHSA-2003:314

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.4–7.5

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.4

v2.06.4mediumAV:N/AC:L/Au:N/C:P/I:P/A:P/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-119USLLM-abgeleitet

betroffene Produkte (18)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
postgresql postgresql= 7.2nvdUScpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
postgresql postgresql= 7.2.1nvdUScpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
postgresql postgresql= 7.2.2nvdUScpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
postgresql postgresql= 7.2.3nvdUScpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
postgresql postgresql= 7.2.4nvdUScpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
postgresql postgresql= 7.3nvdUScpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
postgresql postgresql= 7.3.1nvdUScpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
postgresql postgresql= 7.3.2nvdUScpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
postgresql postgresql= 7.3.3nvdUScpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::as
Red Hat Enterprise Linux ES version 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::es
Red Hat Enterprise Linux WS version 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::ws
Red Hat Linux 7.2alle Versionenfixedredhat_csafUScpe:/o:redhat:linux:7.2
Red Hat Linux 7.3alle Versionenfixedredhat_csafUScpe:/o:redhat:linux:7.3
Red Hat Linux 8.0alle Versionenfixedredhat_csafUScpe:/o:redhat:linux:8.0
Red Hat Linux 9alle Versionenfixedredhat_csafUScpe:/o:redhat:linux:9
Red Hat Linux Advanced Workstation 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::aw

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2003:313Red Hat Security Advisory: : Updated PostgreSQL packages fix buffer overflow2003-11-13csaf · redhat_csafUS
Updated PostgreSQL packages that correct a buffer overflow in the to_ascii routines are now available.
RHSA-2003:314Red Hat Security Advisory: postgresql security update2003-11-12csaf · redhat_csafUS
Updated PostgreSQL packages that correct a buffer overflow in the to_ascii routines are now available.

auch bekannt als (2)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

enisa_euvd nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2003-11-03geändert 2026-06-16

Referenzen (14)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan