CVE-2009-2940

Published: Oct 22, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.

Affected (2)

Products: Pygresql: Pygresql

Pygresql

1 product

Pygresql

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pygresql Pygresql	Version 3.8.1
Pygresql Pygresql	Version 4.0

Running on/with	Platform Versions
Python Python	All versions

References (10)

http://secunia.com/advisories/37046

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/37654

Source: cve@mitre.org

http://ubuntu.com/usn/usn-870-1

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1911

Source: cve@mitre.org

http://www.osvdb.org/59028

Source: cve@mitre.org

http://secunia.com/advisories/37046