CVE-2002-1364 describes a buffer overflow vulnerability in the get_origin function of traceroute-nanog, specifically affecting ehud_gavron tracesroute. This flaw allows attackers to execute arbitrary code by supplying an overly long WHOIS response. With a CVSS score of 7.2, it is considered highly severe due to its local attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a local buffer overflow exploit (EDB-22014) exists on ExploitDB, indicating public exploit code availability. Despite this, there is no evidence of active exploitation, and it has received no community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.0CPE matchmatch criteria | cpe:2.3:a:ehud_gavron:tracesroute:6.0:*:*:*:*:*:*:* | ||
6.1.1CPE matchmatch criteria | cpe:2.3:a:ehud_gavron:tracesroute:6.1.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.