CVEvulnerability

CVE-2004-1224

4.6 MEDIUM Published 2005-01-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-01-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.

Affected configurations

• mtr mtr 0.55 • mtr mtr 0.56 • mtr mtr 0.57 • mtr mtr 0.58 • mtr mtr 0.59 • mtr mtr 0.60 • mtr mtr 0.61 • mtr mtr 0.62 • mtr mtr 0.63 • mtr mtr 0.64 • mtr mtr 0.65

References