Back to Database
Status published
High
CVE-2009-0663
Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl)...
Vulnerability Description
Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-dependent attackers to execute arbitrary code via unspecified input to an application that uses the getline and pg_getline functions to read database rows.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-0663
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.redhat.com/support/errata/RHSA-2009-1067.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50467
- http://www.securityfocus.com/bid/34755
- http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz
- https://launchpad.net/bugs/cve/2009-0663
- http://secunia.com/advisories/34909
- http://www.redhat.com/support/errata/RHSA-2009-0479.html
- http://secunia.com/advisories/35685
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9499
- http://www.debian.org/security/2009/dsa-1780
- http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
- http://secunia.com/advisories/35058
More from cmu
View All →CVE-2022-31506
The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path...
Critical
9.3
CVE-2014-7723
The Carnegie Mellon Silicon Valley (aka edu.cmu.sv.mobile) application 0.1 for...
Medium
5.4
CVE-2014-0027
The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local...
Low
3.3
CVE-2013-4122
Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle...
Medium
4.3
CVE-2011-3481
The index_get_ids function in index.c in imapd in Cyrus IMAP...
Medium
4.3
Affected Vendor
Affected Software
dbd\
Vulnerable Versions:
\
Timeline
Official Publish:
April 30th, 2009
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.