PT-2023-28827 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R versions V9.4.0cu.652 B20230116 through V9.4.0cu.852 B20230719 Description: The issue allows a remote attacker to execute arbitrary code via the command parameter of the "setting/setTracerouteCfg" component. Recommendations: F...

SUSE-SU-2023:4623-1 Security update for traceroute

This update for traceroute fixes the following issues: - CVE-2023-46316: wrapper scripts do not properly parse command lines bsc1216591...

CVE-2023-48192

An issue in TOTOlink A3700R v.9.1.2u.6134B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function...

Ubuntu: Security Advisory (USN-6478-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6478-1 traceroute vulnerability

It was discovered that Traceroute did not properly parse command line arguments. An attacker could possibly use this issue to execute arbitrary commands...

USN-6478-1: Traceroute vulnerability

It was discovered that Traceroute did not properly parse command line arguments. An attacker could possibly use this issue to execute arbitrary commands...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : Traceroute vulnerability (USN-6478-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-6478-1 advisory. It was discovered that Traceroute did not properly parse command line arguments. An attacker could possibly use this issue to...

CBL Mariner 2.0 Security Update: traceroute (CVE-2023-46316)

The version of traceroute installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46316 advisory. - In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command...

CVE-2023-46316 affecting package traceroute for versions less than 2.1.3-1

CVE-2023-46316 affecting package traceroute for versions less than 2.1.3-1. An upgraded version of the package is available that resolves this issue...

The vulnerability of the buc Traceroute tool, related to incorrect handling of code lines, allows a hacker to execute arbitrary code.

The vulnerability of the buc Traceroute tool is related to incorrect processing of code lines. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Fedora 39 : traceroute (2023-b870a4de82)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b870a4de82 advisory. Update to 2.1.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Moderate Photon OS Security Update - PHSA-2023-3.0-0682

Updates of 'traceroute' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-4.0-0506

Updates of 'traceroute', 'gdk-pixbuf' packages of Photon OS have been released...

OESA-2023-1784 traceroute security update

Traceroute tracks the route packets taken from an IP network on their way to a given host. It utilizes the IP protocol's time to live TTL field and attempts to elicit an ICMP TIMEEXCEEDED response from each gateway along the path to the host. Security Fixes: In buc Traceroute 2.0.12 through 2.1.2...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0135

Updates of 'traceroute', 'linux-esx', 'coredns', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-0135

Updates of 'linux', 'traceroute', 'linux-secure', 'linux-esx', 'linux-rt', 'coredns' packages of Photon OS have been released...

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3 the wrapper scripts do not properly parse command lines.

...

ROS-20231102-01

A buc Traceroute vulnerability related to improper handling of lines of code. Exploitation of the vulnerability could allow an attacker acting locally to execute arbitrary code...

The vulnerability of the settings/setTracerouteCfg component in the TOTOLINK X5000R router software allows a malicious actor to execute arbitrary commands and gain full access to the device.

The vulnerability of the settings/setTracerouteCfg component of the TOTOLINK X5000R router software exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

Arbitrary Code Execution

traceroute is vulnerable to Arbitrary Code Execution. A command-line argument parsing vulnerability in the traceroute utility allows an attacker to execute arbitrary code on a vulnerable system by exploiting a flaw in the way that traceroute parses command-line arguments...