Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument.
| Software | From | Fixed in |
|---|---|---|
| ehud_gavron / tracesroute | 6.0 | 6.0.x |
| ehud_gavron / tracesroute | 6.1 | 6.1.x |
| ehud_gavron / tracesroute | 6.1.1 | 6.1.1.x |