CVE-2002-1215 Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694...
HighCVSS 10.0
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claimed as TCP in some sources).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux-ha heartbeat | <= 0.4.9 | No fix listed |
| debian/heartbeat(Debian:12) | < 0.4.9.2-1 | 0.4.9.2-1 |
| debian/heartbeat(Debian:13) | < 0.4.9.2-1 | 0.4.9.2-1 |
| debian/heartbeat(Debian:14) | < 0.4.9.2-1 | 0.4.9.2-1 |
References
- CLA-2002:540 vendor-advisory
- linux-ha.org
- DSA-174 patch vendor-advisory
- linuxha-heartbeat-bo(10357) vdb-entry vendor-advisory
- SuSE-SA:2002:037 vendor-advisory
- 5955 patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2002-1215 vendor-advisory