CVEvulnerability

CVE-2002-0802

7.5 HIGH Published 2002-08-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-08-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks.

Affected configurations

• postgresql postgresql 6.5.0

Related

Referenced by CWE · observed example (2)

  • CWE-179 Incorrect Behavior Order: Early Validation weakness
  • CWE-180 Incorrect Behavior Order: Validate Before Canonicalize weakness

References