CVE-2002-1583

Published: Sep 28, 2004Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.

Affected (5)

Products: Ibm: Db2 Universal Database

Ibm

1 product

Db2 Universal Database

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Db2 Universal Database	Version 6.0
Ibm Db2 Universal Database	Version 7.0
Ibm Db2 Universal Database	Version 7.1
Ibm Db2 Universal Database	Version 7.2
Ibm Db2 Universal Database	Version 8.2