CVE-2002-1215
HIGH 10.0EPSS 6.3%
Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claimed as TCP in some sources).
- CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 6.33% chance of exploitation in the next 30 days, 94th percentile
- Published
- 2002-10-21
- Updated
- 2024-08-08
Proof-of-concept exploits (3)
- CVE-2002-1215/DorukNet-Intern0★ · 2025-09-26
- CVE-2002-1215/newBaTu-katalog0★ · 2024-04-09
- CVE-2002-1215/toptan-katalog-admin0★ · 2024-04-09
Security advisories
- http://www.debian.org/security/2002/dsa-174
- http://www.iss.net/security_center/static/10357.php
- http://www.securityfocus.com/bid/5955