Unscored CVE-2002-0802 EUVD-2002-0794GHSA-8w3r-p439-x2rh

The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be co…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks.

References

http://marc.info/?l=postgresql-general&m=102032794322362
RHSA-2002:149 vendor-advisory
postgresql-sqlascii-sql-injection(10328) vdb-entry