Buffer overflow in Rhythm Tcptrack

CVE-2011-2903

Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which tcptrack is "configured as a handler for other applications." This issue might not qualify for inclusion in CVE.

Vulnerability class: Buffer Overflow

EPSS: 0.023 (81.8th percentile) — read the EPSS interpretation.