Lucene search

K
cve[email protected]CVE-2002-1215
HistoryOct 28, 2002 - 5:00 a.m.

CVE-2002-1215

2002-10-2805:00:00
web.nvd.nist.gov
23
cve-2002-1215
format string vulnerabilities
heartbeat
remote code execution
udp port 694

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.077 Low

EPSS

Percentile

94.2%

Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claimed as TCP in some sources).

Affected configurations

NVD
Node
linux-haheartbeatRange0.4.9

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.077 Low

EPSS

Percentile

94.2%