• info
• discussion
• exploit
• solution
• references

Ehud Gavron TrACESroute Terminator Function Format String Vulnerability

Solution:
The vendor has released a fix which addresses this issue:


Ehud Gavron TrACESroute 6.0

• Debian traceroute-nanog_6.0-2.2_alpha.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_alpha.deb


• Debian traceroute-nanog_6.0-2.2_arm.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_arm.deb


• Debian traceroute-nanog_6.0-2.2_i386.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_i386.deb


• Debian traceroute-nanog_6.0-2.2_m68k.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_m68k.deb


• Debian traceroute-nanog_6.0-2.2_powerpc.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_powerpc.deb


• Debian traceroute-nanog_6.0-2.2_sparc.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_sparc.deb


• Ehud Gavron traceroute.c
  ftp://ftp.login.com/pub/software/traceroute/beta/

Ehud Gavron TrACESroute 6.1

• Ehud Gavron traceroute.c
  ftp://ftp.login.com/pub/software/traceroute/beta/

Ehud Gavron TrACESroute 6.1.1

• Debian traceroute-nanog_6.1.1-1.2_alpha.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_alpha.deb


• Debian traceroute-nanog_6.1.1-1.2_arm.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_arm.deb


• Debian traceroute-nanog_6.1.1-1.2_hppa.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_hppa.deb


• Debian traceroute-nanog_6.1.1-1.2_i386.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_i386.deb


• Debian traceroute-nanog_6.1.1-1.2_ia64.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_ia64.deb


• Debian traceroute-nanog_6.1.1-1.2_m68k.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_m68k.deb


• Debian traceroute-nanog_6.1.1-1.2_mips.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_mips.deb


• Debian traceroute-nanog_6.1.1-1.2_mipsel.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_mipsel.deb


• Debian traceroute-nanog_6.1.1-1.2_powerpc.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_powerpc.deb


• Debian traceroute-nanog_6.1.1-1.2_s390.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_s390.deb


• Debian traceroute-nanog_6.1.1-1.2_sparc.deb
  http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_sparc.deb


• Ehud Gavron traceroute.c
  ftp://ftp.login.com/pub/software/traceroute/beta/