Layer Four Traceroute (LFT) Privilege Escalation Vulnerability
BID:46477
Info
Layer Four Traceroute (LFT) Privilege Escalation Vulnerability
| Bugtraq ID: | 46477 |
| Class: | Unknown |
| CVE: |
CVE-2011-0765 |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 22 2011 12:00AM |
| Updated: | Dec 16 2014 06:57AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Prefix WhoIs LFT 3.2 Gentoo Linux |
| Not Vulnerable: |
Prefix WhoIs LFT 3.3 |
Discussion
Layer Four Traceroute (LFT) Privilege Escalation Vulnerability
Layer Four Traceroute is prone to a privilege-escalation vulnerability.
Attackers can exploit this issue to execute arbitrary code with superuser privileges, completely compromising an affected computer.
Versions prior to 3.3 are vulnerable.
Layer Four Traceroute is prone to a privilege-escalation vulnerability.
Attackers can exploit this issue to execute arbitrary code with superuser privileges, completely compromising an affected computer.
Versions prior to 3.3 are vulnerable.
Exploit / POC
Layer Four Traceroute (LFT) Privilege Escalation Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Layer Four Traceroute (LFT) Privilege Escalation Vulnerability
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
Layer Four Traceroute (LFT) Privilege Escalation Vulnerability
References:
References:
- Product Homepage (Prefix WhoIs)
- VU#946652 pWhois Layer Four Traceroute 3.x vulnerability (US-CERT)