CVE-2002-0004 Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.
HighCVSS 7.2
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera openlinux server | = 3.1 | No fix listed |
| caldera openlinux workstation | = 3.1 | No fix listed |
| debian linux | = 2.2 | No fix listed |
| freebsd | = 4.1.1 | No fix listed |
| freebsd | = 4.2 | No fix listed |
| freebsd | = 4.3 | No fix listed |
| freebsd | = 4.4 | No fix listed |
| mandrakesoft mandrake linux | = 8.0 | No fix listed |
| mandrakesoft mandrake linux | = 8.1 | No fix listed |
| netbsd | = 1.5.2 | No fix listed |
| redhat linux | = 6.2 | No fix listed |
| redhat linux | = 7.0 | No fix listed |
| redhat linux | = 7.1 | No fix listed |
| redhat linux | = 7.2 | No fix listed |
| slackware linux | = 7.0 | No fix listed |
| slackware linux | = 7.1 | No fix listed |
| slackware linux | = 8.0 | No fix listed |
| suse linux | = 6.4 | No fix listed |
| suse linux | = 6.4-alpha | No fix listed |
| suse linux | = 7.0 | No fix listed |
| suse linux | = 7.0-alpha | No fix listed |
| suse linux | = 7.1 | No fix listed |
| suse linux | = 7.1-alpha | No fix listed |
| suse linux | = 7.2 | No fix listed |
| suse linux | = 7.3 | No fix listed |
References
- 20020117 '/usr/bin/at 31337 + vuln' problem + exploit mailing-list
- MDKSA-2002:007 vendor-advisory
- HPSBTL0201-021 vendor-advisory
- HPSBTL0302-034 vendor-advisory
- DSA-102 patch vendor-advisory
- SuSE-SA:2002:003 vendor-advisory
- RHSA-2002:015 patch vendor-advisory
- 3886 exploit patch vdb-entry vendor-advisory
- linux-at-exetime-heap-corruption(7909) vdb-entry