VULNERABILITY INTELLIGENCE
CVE-2009-2356
CVSS score9.3 HIGH
EPSS probability3.93%
CISA KEVNot currently listed
Published2009-07-07
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used, might allow remote attackers to execute arbitrary code via input to the (1) POP3, (2) SMTP, or (3) web component that triggers a long SQL query.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer