Lucene search

[email protected]CVE-2002-0004

HistoryJun 25, 2002 - 4:00 a.m.

CVE-2002-0004

2002-06-2504:00:00

[email protected]

web.nvd.nist.gov

cve-2002-0004

heap corruption

at program

local users

code execution

nvd.

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Heap corruption vulnerability in the “at” program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.

Affected configurations

NVD

Node

calderaopenlinux_serverMatch3.1

calderaopenlinux_workstationMatch3.1

Node

debiandebian_linuxMatch2.268k

debiandebian_linuxMatch2.2alpha

debiandebian_linuxMatch2.2arm

debiandebian_linuxMatch2.2ia-32

debiandebian_linuxMatch2.2powerpc

debiandebian_linuxMatch2.2sparc

freebsdfreebsdMatch4.1.1

freebsdfreebsdMatch4.2

freebsdfreebsdMatch4.3

freebsdfreebsdMatch4.4

mandrakesoftmandrake_linuxMatch8.0

mandrakesoftmandrake_linuxMatch8.0ppc

mandrakesoftmandrake_linuxMatch8.1

mandrakesoftmandrake_linuxMatch8.1ia64

netbsdnetbsdMatch1.5.2

redhatlinuxMatch6.2alpha

redhatlinuxMatch6.2i386

redhatlinuxMatch6.2sparc

redhatlinuxMatch7.0alpha

redhatlinuxMatch7.0i386

redhatlinuxMatch7.1alpha

redhatlinuxMatch7.1i386

redhatlinuxMatch7.1ia64

redhatlinuxMatch7.2alpha

redhatlinuxMatch7.2i386

redhatlinuxMatch7.2ia64

slackwareslackware_linuxMatch7.0

slackwareslackware_linuxMatch7.1

slackwareslackware_linuxMatch8.0

susesuse_linuxMatch6.4i386

susesuse_linuxMatch6.4ppc

susesuse_linuxMatch6.4alpha

susesuse_linuxMatch7.0i386

susesuse_linuxMatch7.0ppc

susesuse_linuxMatch7.0sparc

susesuse_linuxMatch7.0alpha

susesuse_linuxMatch7.1ppc

susesuse_linuxMatch7.1sparc

susesuse_linuxMatch7.1x86

susesuse_linuxMatch7.1alpha

susesuse_linuxMatch7.2i386

susesuse_linuxMatch7.3i386

susesuse_linuxMatch7.3ppc

susesuse_linuxMatch7.3sparc

CPENameOperatorVersion
caldera:openlinux_servercaldera openlinux servereq3.1
caldera:openlinux_workstationcaldera openlinux workstationeq3.1

CPE	Name	Operator	Version
caldera:openlinux_server	caldera openlinux server	eq	3.1
caldera:openlinux_workstation	caldera openlinux workstation	eq	3.1

References

marc.info/?l=bugtraq&m=101128661602088&w=2

marc.info/?l=bugtraq&m=101147632721031&w=2

online.securityfocus.com/advisories/3833

online.securityfocus.com/advisories/3969

www.debian.org/security/2002/dsa-102

www.novell.com/linux/security/advisories/2002_003_at_txt.html

www.redhat.com/support/errata/RHSA-2002-015.html

www.securityfocus.com/bid/3886

exchange.xforce.ibmcloud.com/vulnerabilities/7909

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2002-0004

openvas4 nessus2 suse1 cvelist1 nvd1