CVE-2002-1397: Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a den...

Security readout for executives and security teams

CVE-2002-1397 affects very old PostgreSQL releases. A local user could trigger a flaw in cash_words() with a large negative value, causing database denial of service and possibly arbitrary code execution. Business urgency is mainly for environments still running PostgreSQL 7.2 or earlier. Exposure is likely limited to legacy PostgreSQL 7.2 and earlier systems, especially where untrusted local users or database users can invoke affected functionality. Modern PostgreSQL versions are not identified as affected in the provided sources. Treat as a targeted legacy-risk issue. It is not a broad internet-facing emergency based on the bundle, but any confirmed PostgreSQL 7.2-or-earlier deployment should be upgraded or retired promptly. Mitigation focus: Inventory PostgreSQL versions and prioritize any 7.2 or earlier systems.; Apply vendor PostgreSQL updates referenced by Red Hat, Conectiva, or current vendor guidance.; Restrict local shell and database access on any legacy hosts until remediated..

Prepared

Jul 1, 2026, 06:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.