The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes (number of probes) argument.
| Software | From | Fixed in |
|---|---|---|
| ehud_gavron / tracesroute | 6.0 | 6.0.x |
| ehud_gavron / tracesroute | 6.1 | 6.1.x |
| ehud_gavron / tracesroute | 6.1.1 | 6.1.1.x |