high7.2Public exploit code
CVE-2000-0172
The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Matt Kimball and Roger Wolff mtr 0.28/0.41 / Turbolinux 3.5 b2/4.2/4.4/6.0 - mtr (2)2000-03-03 · local · multiple · Verified
Impact
The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Matt Kimball And Roger Wolff | Mtr | Versions 0.28, 0.41 |
| Turbolinux | Turbolinux | Versions 3.5b2, 4.2, 4.4, 6.0.2 |