CVE-2000-0949

CVE-2000-0949

High · published December 19, 2000

CVSS v2.0
7.2
EPSS
1%
Percentile
67.2
In the wild
Unconfirmed
What it is

Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.

The record
Technical detail
CVSS v2.0
7.2 · HIGH
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.01179 · 67.2th percentile
Published
2000-12-19T10:00Z
Affected products (2)
ProductVersionsFixed in
lbl/lbl_tracerouteall versions—
sun/sunosall versions—
References (18)
http://archives.neohapsis.com/archives/bugtraq/2000-09/0344.html · [email protected]http://archives.neohapsis.com/archives/bugtraq/2000-09/0357.html · [email protected]http://www.calderasystems.com/support/security/advisories/CSSA-2000-034.0.txt · [email protected]http://www.debian.org/security/2000/20001013 · [email protected]http://www.linux-mandrake.com/en/security/MDKSA-2000-053.php3?dis=7.1 · [email protected]http://www.redhat.com/support/errata/RHSA-2000-078.html · [email protected]http://www.securityfocus.com/bid/1739 · [email protected]http://www.turbolinux.com/pipermail/tl-security-announce/2000-October/000025.html · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/5311 · [email protected]http://archives.neohapsis.com/archives/bugtraq/2000-09/0344.html · af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2000-09/0357.html · af854a3a-2127-422b-91ae-364da2661108http://www.calderasystems.com/support/security/advisories/CSSA-2000-034.0.txt · af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2000/20001013 · af854a3a-2127-422b-91ae-364da2661108http://www.linux-mandrake.com/en/security/MDKSA-2000-053.php3?dis=7.1 · af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2000-078.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/1739 · af854a3a-2127-422b-91ae-364da2661108http://www.turbolinux.com/pipermail/tl-security-announce/2000-October/000025.html · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/5311 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 22 JAN 05:00Z
    Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option
    cvelistv5