Filtered by vendor Mtr Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-49809 1 Mtr 1 Mtr 2025-07-13 7.8 High
mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.
CVE-2002-0497 1 Mtr 1 Mtr 2025-04-03 N/A
Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable.
CVE-2004-1224 1 Mtr 1 Mtr 2025-04-03 N/A
Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.