Vulnerabilities

TI-2002-01288 CVE-2002-1364 · GHSA-pgpf-5x3q-m85j

Buffer overflow in the get_origin function in traceroute-nanog allows attackers to…

LOW 35

Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01658 Published 2004-09-01 No fix listed

TI-2003-00426 CVE-2003-0453 · GHSA-9p5h-wr4h-3hj7

traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly…

MEDIUM 48

traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via certain "nprobes" and "max_ttl" arguments that cause an integer overflow that is used when allocating mem…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02805 Published 2003-06-24 No fix listed

TI-2002-01023 CVE-2002-1051 · GHSA-37hr-rhw9-q43g

Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local…

LOW 22

Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00588 Published 2003-04-02 No fix listed

TI-2002-01310 CVE-2002-1387 · GHSA-4395-98rh-2625

The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite…

LOW 21

The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes (number of probes) argument.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00321 Published 2002-12-31 No fix listed

TI-2002-01309 CVE-2002-1386 · GHSA-77px-37x7-938j

Buffer overflow in traceroute-nanog (aka traceroute-ng) may allow local users to execute…