CVE-2009-2943 | BDVDB-2026-39012 Detail

Description#

The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/37048
http://www.debian.org/security/2009/dsa-1909
http://www.osvdb.org/59029

Exploit#

No public exploit known

History#

Version 12009-10-22Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.