CVE-2004-1224
UnknownEPSS 0.33%
Last modified
CVE-2004-1224 is a vulnerability of currently unknown severity. Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mtr | Mtr | 0.55 |
| Mtr | Mtr | 0.56 |
| Mtr | Mtr | 0.57 |
| Mtr | Mtr | 0.58 |
| Mtr | Mtr | 0.59 |
| Mtr | Mtr | 0.60 |
| Mtr | Mtr | 0.61 |
| Mtr | Mtr | 0.62 |
| Mtr | Mtr | 0.63 |
| Mtr | Mtr | 0.64 |
| Mtr | Mtr | 0.65 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-1224?
Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.
How severe is CVE-2004-1224?
Severity scoring for CVE-2004-1224 is pending analysis. The EPSS model estimates a 0.33% probability of exploitation in the next 30 days.
How do I fix CVE-2004-1224?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2004-1224?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST