medium4.6
CVE-2004-1224
Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybind…
Impact
Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mtr | Mtr | Versions 0.55, 0.56, 0.57, 0.58, 0.59, 0.60 |