VULNERABILITY INTELLIGENCE
CVE-2004-1224
CVSS score4.6 NONE
EPSS probability0.33%
CISA KEVNot currently listed
Published2005-01-10
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other