The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes (number of probes) argument.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Tracesroute | Ehud_gavron | 6.0 | 6.0 |
Tracesroute | Ehud_gavron | 6.1 | 6.1 |
Tracesroute | Ehud_gavron | 6.1.1 | 6.1.1 |