Unscored CVE-2002-1583 EUVD-2002-1564GHSA-r4rc-r399-pvjj

Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a lo…

Published Aug 20, 2004 · Updated Sep 17, 2024 · Assigned by mitre

Description

Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.

References

4817 vdb-entry
MSS-OAR-E01-2002:318.1 vendor-advisory
ibm-db2-db2ckpw-bo(9078) vdb-entry