PT-2002-1026 · Gnu · At

Published 2002-01-15 · Updated 2017-10-10 · CVE-2002-0004

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions at versions prior to the fixed version

Description The issue is related to a heap corruption vulnerability in the "at" program, allowing local users to execute arbitrary code via a malformed execution time. This vulnerability can cause the "at" program to free the same memory twice, leading to potential security issues. Additionally, multiple vulnerabilities in the "at" package may lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited by a local attacker.

Recommendations For at versions prior to the fixed version, update to the latest version to resolve the issue. As a temporary workaround, consider restricting access to the "at" program to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

BDU:2015-04100

BDU:2015-07787

CVE-2002-0004

Affected Products

At

References · 16

• 🔥 http://securityfocus.com/bid/3886 · Exploit
• 🔥 https://exploit-db.com/exploits/21229 · Exploit
• http://online.securityfocus.com/advisories/3833 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=101147632721031&w=2 · Vendor Advisory
• http://online.securityfocus.com/advisories/3969 · Vendor Advisory
• http://novell.com/linux/security/advisories/2002_003_at_txt.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07787 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-0004 · Security Note
• http://redhat.com/support/errata/RHSA-2002-015.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04100 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0004 · Security Note
• http://debian.org/security/dsa-102 · Note
• https://rhn.redhat.com/errata/RHSA-2002-015.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7909 · Note
• http://marc.info/?l=bugtraq&m=101128661602088&w=2 · Note