CVE-2002-0004: Caldera Openlinux Server

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.

Affected products

• Caldera Openlinux Server: version 3.1 only
• Caldera Openlinux Workstation: version 3.1 only
• Debian Debian Linux: version 2.2 only
• Freebsd Freebsd: version 4.1.1 only; version 4.2 only; version 4.3 only; version 4.4 only
• Mandrakesoft Mandrake Linux: version 8.0 only; version 8.1 only
• Netbsd Netbsd: version 1.5.2 only
• Red Hat Linux: version 6.2 only; version 7.0 only; version 7.1 only; version 7.2 only
• Slackware Slackware Linux: version 7.0 only; version 7.1 only; version 8.0 only
• Suse Suse Linux: version 6.4 only; version 7.0 only; version 7.1 only; version 7.2 only; version 7.3 only

Published 2002-02-27. Last modified 2026-06-16.