CVE-2002-1397
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to...
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.
- Record
CVE-2002-1397- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.
- Record
CVE-2002-1397- Updated
- 2026-11-02
EUVDEUVD-2002-1380 No score
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.
- Record
EUVD-2002-1380- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-83mr-c9w5-46g4 No score
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to...
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.
- Record
GHSA-83mr-c9w5-46g4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1397 is a high vulnerability (CVSS 7.5) in Postgresql, published January 8, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. No source names a fixed version.
References
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000524
marc.info?l=bugtraq&m=102977465204357&w=2
secunia.com/advisories/8034
securityfocus.com/bid/5497
redhat.com/support/errata/RHSA-2003-001.html
exchange.xforce.ibmcloud.com/vulnerabilities/9891
developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/cash.c.diff?r1=1.51&r2=1.52
nvd.nist.gov/vuln/detail/CVE-2002-1397
github.com/advisories/GHSA-83mr-c9w5-46g4