AT 3.1.8 - Formatted Time Heap Overflow
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | Debian GNU/Linux Local Compromise Data Compromise | 28 Apr 201500:00 | – | bdu_fstec |
| Red Hat Linux Data Compromise | 28 Apr 201500:00 | – | bdu_fstec |
 | CVE-2002-0004 | 25 Jun 200204:00 | – | cve |
 | CVE-2002-0004 | 25 Jun 200204:00 | – | cvelist |
 | Debian DSA-102-2 : at - daemon exploit | 29 Sep 200400:00 | – | nessus |
| Mandrake Linux Security Advisory : at (MDKSA-2002:007) | 31 Jul 200400:00 | – | nessus |
 | EUVD-2002-0004 | 7 Oct 202500:30 | – | euvd |
 | CVE-2002-0004 | 27 Feb 200205:00 | – | nvd |
 | Debian Security Advisory DSA 102-1 (at) | 17 Jan 200800:00 | – | openvas |
| Debian Security Advisory DSA 102-2 (at) | 17 Jan 200800:00 | – | openvas |
10
source: https://www.securityfocus.com/bid/3886/info
at is a freely available, open source scheduler package. It is included with various Unix and Linux operating systems, and maintained by public domain.
Under some circumstances, at does not correctly handle time input. A local user attempting to schedule a task via commandline execution and using a maliciously crafted time format can cause heap corruption in at. As the at program is installed setuid root in most implementations, this could result in the execution of arbitrary code with administrative privileges.
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21229.tar.gzData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Sep 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.2
EPSS0.01343