Mtr vulnerabilities

CVE-2008-2357 [MEDIUM] CVE-2008-2357: Stack-based buffer overflow in the split_redraw function in split Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be

CVE-2025-49809 [HIGH] CWE-829 CVE-2025-49809: mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.

CVE-2002-0497 [LOW] CVE-2002-0497: Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable.

CVE-2004-1224 [MEDIUM] CVE-2004-1224: Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users t Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.