7.2

CVE-2002-1583

Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Universal Database Version 6.0
Ibm ≫ Db2 Universal Database Version 7.0 Edition linux
Ibm ≫ Db2 Universal Database Version 7.1 Edition linux
Ibm ≫ Db2 Universal Database Version 7.2 Edition linux
Ibm ≫ Db2 Universal Database Version 8.2 Edition windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.372
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.iss.net/security_center/static/9078.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4817
Patch
Vendor Advisory
http://www.securitytracker.com/alerts/2002/May/1004352.html
Patch
Vendor Advisory