NetSight
IP …
high7.2Public exploit code

CVE-2002-0004

Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.

Affected products

VendorProductAffected versions
CalderaOpenlinux Server
Version 3.1
CalderaOpenlinux Workstation
Version 3.1
DebianDebian Linux
Version 2.2
FreebsdFreebsd
Versions 4.1.1, 4.2, 4.3, 4.4
MandrakesoftMandrake Linux
Versions 8.0, 8.1
NetbsdNetbsd
Version 1.5.2
RedhatLinux
Versions 6.2, 7.0, 7.1, 7.2
SlackwareSlackware Linux
Versions 7.0, 7.1, 8.0
SuseSuse Linux
Versions 6.4, 7.0, 7.1, 7.2, 7.3

References