Vulnerability Details CVE-2002-1386
Buffer overflow in traceroute-nanog (aka traceroute-ng) may allow local users to execute arbitrary code via a long hostname argument.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.1%
CVSS Severity
CVSS v2 Score 4.6
References
- http://marc.info/?l=bugtraq&m=103849968732634&w=2
- http://www.debian.org/security/2003/dsa-254
- http://www.iss.net/security_center/static/10608.php
- http://www.securityfocus.com/bid/6274
- http://marc.info/?l=bugtraq&m=103849968732634&w=2
- http://www.debian.org/security/2003/dsa-254
- http://www.iss.net/security_center/static/10608.php
- http://www.securityfocus.com/bid/6274
Products affected by CVE-2002-1386
-
cpe:2.3:a:ehud_gavron:tracesroute:6.0
-
cpe:2.3:a:ehud_gavron:tracesroute:6.1
-
cpe:2.3:a:ehud_gavron:tracesroute:6.1.1