← Back

CVE-2004-1224

nvd nist
Published: Jan 10, 2005Modified: Apr 16, 2026

JSON object

Loading...
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD

Description

Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.

Affected (11)

Products: Mtr: Mtr
1 product
Mtr
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Mtr
Version 0.55
Version 0.56
Version 0.57
Version 0.58
Version 0.59
Version 0.60
Version 0.61
Version 0.62
Version 0.63
Version 0.64
Version 0.65

References (4)

Timeline

No history available yet.