CVE-2004-1224

NameCVE-2004-1224
DescriptionOff-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
mtr (PTS)buster0.92-2fixed
bullseye0.94-1+deb11u1fixed
bookworm0.95-1fixed
sid, trixie0.95-1.1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
mtrsource(unstable)0.67-1

Search for package or bug name: Reporting problems