CVE-2002-1397 — security flaw

Back Back to CVE browser

HIGH

security flaw

Published Jan 8, 2003

7.5

HIGH

CVSS 2.0

EPSS 2.75%

Description

Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.

Affected products

Red Hat Enterprise Linux AS (Advanced Server) version 2.1

n/a

Fixed · RHSA-2002:301
Red Hat Linux 6.2

n/a

Fixed · RHSA-2003:010
Red Hat Linux 7.0

n/a

Fixed · RHSA-2003:010
Red Hat Linux 7.1

n/a

Fixed · RHSA-2003:010
Red Hat Linux 7.2

n/a

Fixed · RHSA-2003:010
Red Hat Linux 7.3

n/a

Fixed · RHSA-2003:001
Red Hat Linux 8.0

n/a

Fixed · RHSA-2003:001
Red Hat Linux Advanced Workstation 2.1

n/a

Fixed · RHSA-2002:301

Product	Package	State	Advisory
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	n/a	Fixed	RHSA-2002:301
Red Hat Linux 6.2	n/a	Fixed	RHSA-2003:010
Red Hat Linux 7.0	n/a	Fixed	RHSA-2003:010
Red Hat Linux 7.1	n/a	Fixed	RHSA-2003:010
Red Hat Linux 7.2	n/a	Fixed	RHSA-2003:010
Red Hat Linux 7.3	n/a	Fixed	RHSA-2003:001
Red Hat Linux 8.0	n/a	Fixed	RHSA-2003:001
Red Hat Linux Advanced Workstation 2.1	n/a	Fixed	RHSA-2002:301

Remediation

No remediation recorded yet.

Metrics

2.75% 0.02754

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02754

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.75% (0.02754)	85.71th	v5 (v2026.06.15)
Jun 15, 2026	2.75% (0.02754)	84.26th	v5 (v2026.06.15)
Mar 17, 2025	0.66% (0.00664)	69.48th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Nov 6, 2023	0.04% (0.00042)	5.72th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	8.24th	v3 (v2023.03.01)
Mar 6, 2023	1.75% (0.01755)	76.27th	v2 (v2022.01.01)
Feb 23, 2023	1.75% (0.01755)	76.22th	v2 (v2022.01.01)
Apr 1, 2022	1.75% (0.01755)	74.16th	v2 (v2022.01.01)
Feb 4, 2022	1.75% (0.01755)	53.42th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (11)

http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/cash.c.diff?r1=1.51&r2=1.52
x_refsource_MISC
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524
vendor-advisoryx_refsource_CONECTIVA
http://marc.info/?l=bugtraq&m=102977465204357&w=2
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/8034
third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2003-001.html
vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/5497
vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2002-1397
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1616910
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/9891
vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2002-1397
https://www.cve.org/CVERecord?id=CVE-2002-1397

Link	Providers	Tags
http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/cash.c.diff?r1=1.51&r2=1.52		x_refsource_MISC
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524		vendor-advisoryx_refsource_CONECTIVA
http://marc.info/?l=bugtraq&m=102977465204357&w=2		mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/8034		third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2003-001.html		vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/5497		vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2002-1397		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1616910		Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/9891		vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2002-1397
https://www.cve.org/CVERecord?id=CVE-2002-1397