← Back

Tcpflow

tcpflow

Vendor: Jeremy Elson • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Jeremy Elson
1Tcpflow
Apr 16, 2026
Aug 27, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid pro...Show more
Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow.Show less