CVE-2002-1583

HIGH 7.2CVE-2002-1583 · Published 28/09/2004 · updated 16/06/2026

In short

CVE-2002-1583 is a HIGH (CVSS 7.2) vulnerability affecting db2 universal database (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 41.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
db2 universal database ibm	`= 6.0= 7.0= 7.1= 7.2= 8.2`	No fix yet

Description

Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.

References

iss.net/security_center/static/9078.php · Patch
securityfocus.com/bid/4817 · Patch
securitytracker.com/alerts/2002/May/1004352.html · Patch

More vulnerabilities in db2 universal database

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free