Description
Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable.
References
- 20020306 mtr 0.45, 0.46 mailing-list
- mtr-options-bo(8367) vdb-entry
- 4217 vdb-entry
- DSA-124 vendor-advisory