CVE-2002-1051

Published: Oct 4, 2002Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument.

Affected (3)

Products: Ehud Gavron: Tracesroute

Ehud Gavron

1 product

Tracesroute

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ehud Gavron Tracesroute	Version 6.0
Ehud Gavron Tracesroute	Version 6.1.1
Ehud Gavron Tracesroute	Version 6.1

References (14)

http://archives.neohapsis.com/archives/bugtraq/2002-06/0040.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2002-07/0254.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102737546927749&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102753136231920&w=2

Source: cve@mitre.org

http://www.iss.net/security_center/static/9291.php

Source: cve@mitre.org

Vendor Advisory

http://www.novell.com/linux/security/advisories/2000_041_traceroute_txt.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/4956

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2002-06/0040.html