Vulnerability in Michael C. Toren Tcptraceroute
CVE-2003-0489
tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.
EPSS: 0.004 (33.4th percentile) — read the EPSS interpretation.
Affected products
- Michael_c._toren Tcptraceroute
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)