tcptraceroute: problems dropping root privileges
| Package(s): | tcptraceroute | CVE #(s): | CAN-2003-0489 | ||||||||
| Created: | June 28, 2003 | Updated: | July 10, 2003 | ||||||||
| Description: | tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets. This may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute. | ||||||||||
| Alerts: |
| ||||||||||