CVE-2002-1215

Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claimed as TCP in some sources).

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2002-10-28

Last modified

2024-08-08

Affected products

• Heartbeat (Linux-ha)

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000540
• http://linux-ha.org/security/sec01.txt
• http://www.debian.org/security/2002/dsa-174
• http://www.iss.net/security_center/static/10357.php
• http://www.novell.com/linux/security/advisories/2002_037_heartbeat.html
• http://www.securityfocus.com/bid/5955