Solaris 10 /usr/sbin/traceroute vulnerabilities

/usr/sbin/traceroute from Solaris 10 is vulnerable to buffer overflow in handling -g argument. After supplying 10 -g parameters, return address is overwritten by IP address argument: atari:root:/home/venglin /usr/sbin/traceroute -g 1 -g 2 -g 3 -g 4 -g 5 -g 6 -g 7 -g 8 -g 9 -g 10 127.0.0.1...

Sun Solaris 10 Traceroute - Multiple Local Buffer Overflow Vulnerabilities

Sun Solaris 10 Traceroute - Multiple Local Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/14049/info Sun Solaris traceroute is affected by multiple local buffer overflow vulnerabilities. These vulnerabilities present themselves when the application handles excessive dat...

Sun Solaris 10 Traceroute - Multiple Local Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/14049/info Sun Solaris traceroute is affected by multiple local buffer overflow vulnerabilities. These vulnerabilities present themselves when the application handles excessive data supplied through command line arguments. These issue are reported to affe...

CVE-2005-1560

The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to certain commands, as demonstrated using ping and traceroute...

CVE-2005-1560

The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to certain commands, as demonstrated using ping and traceroute...

neteyes nexusway border gateway - Multiple Vulnerabilities

neteyes nexusway border gateway - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/13596/info NexusWay is reportedly affected by multiple remote vulnerabilities. These issues can allow an unauthorized attacker to execute arbitrary commands and gain administrative access to an...

CVE-2002-1608

Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code...

Debian DSA-254-1 : traceroute-nanog - buffer overflow

A vulnerability has been discovered in NANOG traceroute, an enhanced version of the Van Jacobson/BSD traceroute program. A buffer overflow occurs in the 'getorigin' function. Due to insufficient bounds checking performed by the whois parser, it may be possible to corrupt memory on the system stac...

Debian DSA-348-1 : traceroute-nanog - integer overflow, buffer overflow

traceroute-nanog, an enhanced version of the common traceroute program, contains an integer overflow bug which could be exploited to execute arbitrary code. traceroute-nanog is setuid root, but drops root privileges immediately after obtaining raw ICMP and raw IP sockets. Thus, exploitation of th...

CVE-2002-1364

CVE-2002-1364 describes a buffer overflow in traceroute-nanog’s get_origin() function triggered by long WHOIS responses. This leads to arbitrary code execution and potential privilege escalation on affected systems. Public advisories (Debian DSA-254-1) note the issue was fixed in traceroute-nanog...

CVE-2002-1364

Buffer overflow in the getorigin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses...

SUSE-SA:2002:043: traceroute-nanog/nkitb

The remote host is missing the patch for the advisory SUSE-SA:2002:043 traceroute-nanog/nkitb. Traceroute is a tool that can be used to track packets in a TCP/IP network to determine it's route or to find out about not working routers. Traceroute-nanog requires root privilege to open a raw socket...

Record Route

It is possible to obtain the traceroute to the remote host by sending packets with the 'Record Route' option set. It is a complement to traceroute. C Tenable Network Security, Inc. References: RFC 792 Internet Control Message Protocol RFC 791 Internet Protocol include"compat.inc"; ifdescription...

CVE-2003-0453

traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via certain "nprobes" and "maxttl" arguments that cause an integer overflow that is used when allocating memory, which leads to a buffer overflow...

[SECURITY] [DSA-348-1] New traceroute-nanog packages fix integer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 348-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 11th, 2003 http://www.debian.org/security/faq -...

DSA-348 traceroute-nanog - integer overflow, buffer overflow

Bulletin has no description...

CVE-2003-0453

traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via certain "nprobes" and "maxttl" arguments that cause an integer overflow that is used when allocating memory, which leads to a buffer overflow...

CVE-2003-0453

CVE-2003-0453 relates to traceroute-nanog. A memory allocation overflow bug (integer overflow) in certain nprobes/max_ttl inputs can cause a buffer overflow, potentially enabling arbitrary code execution by a local user. Public disclosures reference the Debian DSA-348 advisory which fixes the iss...

BAZARR FAREWELL

/ traceroute local root advisory / / by: bazarr / / [email protected] / / bazarr episode / ------------------ PREFACE its me bazarr. i dont use ziplip anymore. resend any emails sent to bazarr@ziplip to [email protected] if i dident respond to them. this is a local root vulnerability in the...

CVE-2002-1051

The CVE-2002-1051 entry concerns NANOG traceroute (traceroute-nanog). A format string vulnerability exists in TrACESroute 6.0 GOLD that allows local users to execute arbitrary code via the -T (terminator) argument. The issue is tied to NANOG traceroute’s handling of input leading to potential cod...