VULNERABILITY INTELLIGENCE

CVE-2002-1583

CVSS score7.2 HIGH
EPSS probability0.47%
CISA KEVNot currently listed
Published2004-09-28
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.

Primary references