4.6
CVSSv2

CVE-2002-1387

Published: 02/01/2003 Updated: 18/10/2016
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes (number of probes) argument.

Vulnerable Product Search on Vulmon Subscribe to Product

ehud gavron tracesroute 6.1.1

ehud gavron tracesroute 6.0

ehud gavron tracesroute 6.1

Vendor Advisories

A vulnerability has been discovered in NANOG traceroute, an enhanced version of the Van Jacobson/BSD traceroute program A buffer overflow occurs in the 'get_origin()' function Due to insufficient bounds checking performed by the whois parser, it may be possible to corrupt memory on the system stack This vulnerability can be exploited by a remote ...