CVE-2002-1402: PostgreSQL

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local users to cause a denial of service and possibly execute arbitrary code.

Affected products

• PostgreSQL PostgreSQL: version 6.3.2 only; version 6.5.3 only; version 7.0.3 only; version 7.1 only; version 7.1.1 only; version 7.1.2 only; …

Published 2003-01-17. Last modified 2026-06-16.