4 matches found
CVE-2003-0453
CVE-2003-0453 relates to traceroute-nanog. A memory allocation overflow bug (integer overflow) in certain nprobes/max_ttl inputs can cause a buffer overflow, potentially enabling arbitrary code execution by a local user. Public disclosures reference the Debian DSA-348 advisory which fixes the iss...
CVE-2003-0453: Undefined Security Weakness
traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via certain "nprobes" and "maxttl" arguments that cause an integer overflow that is used when allocating memory, which leads to a buffer overflow...
CVE-2002-1387
The spray mode in traceroute-nanog aka traceroute-ng may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes number of probes argument...
CVE-2002-1387
CVE-2002-1387 affects traceroute-nanog: the spray mode may allow local users to overwrite arbitrary memory locations via an array index overflow when using the nprobes argument. The CVSS/NVD entry indicates local access, low attack complexity, and partial impact to confidentiality, integrity, and...