header-logo
Suggest Exploit
vendor:
Traceroute-nanog
by:
Carl Livitt
7,2
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Traceroute-nanog
Affected Version From: 6.0
Affected Version To: 6.1.1
Patch Exists: Yes
Related CWE: N/A
CPE: a:traceroute-nanog:traceroute-nanog:6.1.1
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: SuSE 7.1, 7.2, 7.3 & 8.0
2002

Traceroute-nanog Buffer Overflow Vulnerability

A vulnerability has been discovered in Traceroute-nanog. It has been reported that Traceroute-nanog contains a buffer overflow condition. The overflow occurs in the 'get_origin()' function in the 'traceroute.c' file. Due to insufficient bounds checking performed by the whois parser, it may be possible to cause 'get_origin()' to corrupt memory on the system stack. This vulnerability can be exploited by an attacker to gain root privileges on a target host.

Mitigation:

Apply the latest security patches and updates to the Traceroute-nanog application.
Source

Exploit-DB raw data: