CVE-2000-0949: Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option

Unscored severity · published Dec 19, 2000

CVE-2000-0949

Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option

–

CVSS

1.2%

EPSS

On KEV

Description

Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.

Exploitation

Is it being used?

Exploit prediction (EPSS)1.2% · higher than 68% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

1.4a5 · source: NVD

5.5.1 · source: NVD

Affected product

Lbl Traceroute

Lbl

References