Lucene search

K
nvd[email protected]NVD:CVE-2002-1397
HistoryJan 17, 2003 - 5:00 a.m.

CVE-2002-1397

2003-01-1705:00:00
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.

Affected configurations

NVD
Node
postgresqlpostgresqlMatch6.3.2
OR
postgresqlpostgresqlMatch6.5.3
OR
postgresqlpostgresqlMatch7.0.3
OR
postgresqlpostgresqlMatch7.1
OR
postgresqlpostgresqlMatch7.1.1
OR
postgresqlpostgresqlMatch7.1.2
OR
postgresqlpostgresqlMatch7.1.3
OR
postgresqlpostgresqlMatch7.2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for NVD:CVE-2002-1397