CVE-2002-1386

Buffer overflow in traceroute-nanog aka traceroute-ng may allow local users to execute arbitrary code via a long hostname argument...

CVE-2002-1387

CVE-2002-1387 affects traceroute-nanog: the spray mode may allow local users to overwrite arbitrary memory locations via an array index overflow when using the nprobes argument. The CVSS/NVD entry indicates local access, low attack complexity, and partial impact to confidentiality, integrity, and...

CVE-2002-1386: Undefined Security Weakness

Buffer overflow in traceroute-nanog aka traceroute-ng may allow local users to execute arbitrary code via a long hostname argument...

CVE-2002-1387: Undefined Security Weakness

The spray mode in traceroute-nanog aka traceroute-ng may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes number of probes argument...

CVE-2002-1364

Buffer overflow in the getorigin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses...

TracerouteNG - never ending story

Hi everyone, I want to provide some additional information about the recently discovered traceroute-ng flaw. I decided to disclose to details right now because I do not believe that the flaw is easily exploitable. 1 The vulnerablilty. The patch provided by vendors like SuSE is not sufficient. It...

Traceroute-nanog 6 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/6166/info A vulnerability has been discovered in Traceroute-nanog. It has been reported that Traceroute-nanog contains a buffer overflow condition. The overflow occurs in the 'getorigin' function in the 'traceroute.c' file. Due to insufficient bounds...

Traceroute-nanog 6 - Local Buffer Overflow

Traceroute-nanog 6 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/6166/info A vulnerability has been discovered in Traceroute-nanog. It has been reported that Traceroute-nanog contains a buffer overflow condition. The overflow occurs in the 'getorigin' function in the...

networking_utils.php

Title: The bug in networkingutils.php http://www.sourcecraft.org/downloads networkingutilsPHP Show Files Vulnerability Summary: networkingutils.php Includes a ping function, a traceroute function, and an nslookup function. Vulnerable systems: networkingutils networkingutils.php of the...

PHP.networking_utils

Title: The bug in networkingutils.php http://www.sourcecraft.org/downloads networkingutilsPHP Show Files Vulnerability Summary: networkingutils.php Includes a ping function, a traceroute function, and an nslookup function. Vulnerable systems: networkingutils networkingutils.php of the...

CVE-2002-0910: Undefined Security Weakness

Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities 1 linux-ftpd, 2 pcnfsd, 3 tftp, 4 traceroute, or 5 from/to...

PT-2002-1539 · Linux Directory Penguin · Linux Directory Penguin Traceroute.Pl Cgi Script

Name of the Vulnerable Software and Affected Versions: Linux Directory Penguin traceroute.pl CGI script version 1.0 Description: The issue allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter. This is a result of a flaw in the traceroute.pl CGI script...

Another small metacharacter bug in Penguin Traceroute v1.0

Hi, As I was surfing through some older Securityfocus archives I stumbled across the article about Penguin traceroute v1.0 http://online.securityfocus.com/archive/1/263285 This article described some metacharacter bugs in this CGI script, also it included a suggested fix. quote Fix === Open up th...

CVE-2002-0470: Undefined Security Weakness

PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privileges by inserting a Trojan horse program into the search path...

PHP script: Penguin Traceroute, Remote Command Execution

/ ------------------------------ --------Security Freaks------- ----www.securityfreaks.com---- ------------------------------ / Info ==== Software: Penguin Traceroute Website: http://www.linux-directory.com/scripts/traceroute.shtml Versions: 1.0 Platforms: Linux Vulnerability Type: Remote Command...

Network Tool 0.2 Addon for PHPNuke vulnerable to remote command execution

-- Network Tool 0.2 Addon for PHPNuke vulnerable to remote command execution -- Problem discovered: 16/11/2001 by Cabezon Aurйlien | [email protected] http://www.isecurelabs.com/article.php?sid=209 -- Description -- This Phpnuke addon includes web frontends for the following nix...

CVE-2000-0314

CVE-2000-0314 affects NetBSD 1.3.3 and Linux where traceroute with a large waittime (-w) is not parsed correctly, causing the time delay for sending packets to be zero. This can enable local users to flood other systems. The description covers the affected vectors and impact as stated; no explici...

CVE-2000-0315

traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks...

CVE-2000-0315

Technical specifics (affected products, vulnerable components, root cause, and fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2000-0314

traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime -w option, which is not parsed properly and sets the time delay for sending packets to zero...