Signature Detail
Short Name |
APP:MISC:HEARTBEAT-OF |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Heartbeat Buffer Overflow (Linux/x86) |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Heartbeat Buffer Overflow (Linux/x86)
This signature detects attempts to exploit a known vulnerability against Heartbeat 0.4.9.1 for Linux. A successful attack can allow attackers to execute arbitrary commands with daemon privileges.
Extended Description
The Linux-HA heartbeat utility is vulnerable to a remotely exploitable buffer overflow condition. Attackers may exploit the vulnerability to execute arbitrary code. It has been reported that the condition is related to the handling of TCP packets.
Affected Products
- Linux-HA heartbeat 0.4.9
- Linux-HA heartbeat 0.4.9 .1
- Linux-HA heartbeat 0.4.9 a
- Linux-HA heartbeat 0.4.9 b
- Linux-HA heartbeat 0.4.9 c
- Linux-HA heartbeat 0.9.4 d
References
- BugTraq: 5955
- CVE: CVE-2002-1215
- URL: http://linux-ha.org/security/sec01.txt
- URL: http://www.debian.org/security/2002/dsa-174