CVE Catalog

CVE-2000-0172

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.82%

52th percentile - higher than 52% of all known CVEs

Summary

The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.

Risk Assessment

Local users may exploit this vulnerability to gain unauthorized access to the system with administrator privileges.

Recommendation

It is recommended to update the mtr program to the latest version that fixes the privilege management.

Other vulnerabilities in mtr

Original NVD description (English source)

The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS