CVE-2000-0949
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.2%
from disclosure to weapon0 days
Published on NVDJan 22
1st PoCSep 28
exploitation probability
1.2%top 35% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.
Affected products
n/a · n/apublic PoCs found — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/178exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20250exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20251exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20252⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://archives.neohapsis.com/archives/bugtraq/2000-09/0344.htmlhttp://archives.neohapsis.com/archives/bugtraq/2000-09/0357.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5311http://www.calderasystems.com/support/security/advisories/CSSA-2000-034.0.txthttp://www.debian.org/security/2000/20001013http://www.linux-mandrake.com/en/security/MDKSA-2000-053.php3?dis=7.1http://www.redhat.com/support/errata/RHSA-2000-078.htmlhttp://www.securityfocus.com/bid/1739http://www.turbolinux.com/pipermail/tl-security-announce/2000-October/000025.html