10

CVE-2002-1215

Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claimed as TCP in some sources).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux-ha ≫ Heartbeat Version <= 0.4.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.33% 0.927
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000540
http://linux-ha.org/security/sec01.txt
http://www.debian.org/security/2002/dsa-174
Patch
Vendor Advisory
http://www.iss.net/security_center/static/10357.php
Vendor Advisory
http://www.novell.com/linux/security/advisories/2002_037_heartbeat.html
http://www.securityfocus.com/bid/5955
Patch
Vendor Advisory