CVE-2000-0172: The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges

Unscored severity · published Mar 3, 2000

CVE-2000-0172

The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges

–

CVSS

0.8%

EPSS

On KEV

Description

The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.8% · higher than 57% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

0.28; 0.41 · source: NVD

3.5b2; 4.2; 4.4; 6.0.2 · source: NVD

Affected product

Mtr

Matt Kimball And Roger Wolff

References