lbl-traceroute.txt

LBL traceroute exploit. By Dvorak, Synnergy Networks www.synnergy.net Vulnerable: All versions of LBL traceroute using savestr. See Chris Evans post in bugtraq http://www.securityfocus.com/archive/1/136215 Discovery: Pekka Savola [email protected] Published to bugtraq by: Chris Evans...

Traceroute exploit + story

LBL traceroute exploit. By Dvorak, Synnergy Networks www.synnergy.net Vulnerable: All versions of LBL traceroute using savestr. See Chris Evans post in bugtraq http://www.securityfocus.com/archive/1/136215 Discovery: Pekka Savola [email protected] Published to bugtraq by: Chris Evans...

Very interesting traceroute flaw

Hi, CREDIT ====== I'm starting with a credit section because I did not discover this flaw. The flaw was discovered by Pekka Savola [email protected], who noted that traceroute could be caused to crash, which is pretty suboptimal behaviour for a suid-root program :- I took this forward and specula...

LBL Traceroute 1.4 a5 - Heap Corruption (3)

LBL Traceroute 1.4 a5 - Heap Corruption 3 // source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw...

LBL Traceroute 1.4 a5 - Heap Corruption (1)

LBL Traceroute 1.4 a5 - Heap Corruption 1 // source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw...

LBL Traceroute 1.4 a5 - Heap Corruption (2)

// source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw sockets. Certain versions of LBNL tracerou...

LBL Traceroute 1.4 a5 - Heap Corruption (2)

LBL Traceroute 1.4 a5 - Heap Corruption 2 // source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw...

LBL Traceroute 1.4 a5 - Heap Corruption (1)

// source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw sockets. Certain versions of LBNL tracerou...

CVE-1999-0525

IP traceroute is allowed from arbitrary hosts...

CVE-1999-0525

Technical details about CVE-1999-0525 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

Traceroute Information

Makes a traceroute to the remote host. TRUSTED...

CVE-1999-0525

IP traceroute is allowed from arbitrary hosts...

PT-1997-1150 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows IP traceroute from arbitrary hosts. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...