Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Tracesroute | Ehud_gavron | 6.0 (including) | 6.0 (including) |
Tracesroute | Ehud_gavron | 6.1 (including) | 6.1 (including) |
Tracesroute | Ehud_gavron | 6.1.1 (including) | 6.1.1 (including) |