Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Mtr
(Matt_kimball_and_roger_wolff)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 2 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2008-05-21 | CVE-2008-2357 | Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr. | Mtr | N/A | ||
| 2000-03-03 | CVE-2000-0172 | The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges. | Mtr, Turbolinux | N/A |