<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: ehud gavron</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2003-0453: traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code</title><link>https://patchthecve.com/cve/CVE-2003-0453.html</link><guid>https://patchthecve.com/cve/CVE-2003-0453.html</guid><pubDate>Tue, 16 Jun 2026 22:02:13 +0000</pubDate><description>HIGH 10.0: traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via certain &quot;nprobes&quot; and &quot;max_ttl&quot; arguments that cause an integer overflow that is used when allocating memory, which leads to a buffer overflow.</description></item><item><title>CVE-2002-1387: The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite arbitrary memory loc</title><link>https://patchthecve.com/cve/CVE-2002-1387.html</link><guid>https://patchthecve.com/cve/CVE-2002-1387.html</guid><pubDate>Tue, 16 Jun 2026 21:59:13 +0000</pubDate><description>MEDIUM 4.6: The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes (number of probes) argument.</description></item><item><title>CVE-2002-1386: Buffer overflow in traceroute-nanog (aka traceroute-ng) may allow local users to execute arbitrary code via a </title><link>https://patchthecve.com/cve/CVE-2002-1386.html</link><guid>https://patchthecve.com/cve/CVE-2002-1386.html</guid><pubDate>Tue, 16 Jun 2026 21:59:13 +0000</pubDate><description>MEDIUM 4.6: Buffer overflow in traceroute-nanog (aka traceroute-ng) may allow local users to execute arbitrary code via a long hostname argument.</description></item><item><title>CVE-2002-1364: Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via </title><link>https://patchthecve.com/cve/CVE-2002-1364.html</link><guid>https://patchthecve.com/cve/CVE-2002-1364.html</guid><pubDate>Tue, 16 Jun 2026 21:59:10 +0000</pubDate><description>HIGH 7.2: Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses.</description></item><item><title>CVE-2002-1051: Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbit</title><link>https://patchthecve.com/cve/CVE-2002-1051.html</link><guid>https://patchthecve.com/cve/CVE-2002-1051.html</guid><pubDate>Tue, 16 Jun 2026 21:58:38 +0000</pubDate><description>MEDIUM 4.6: Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument.</description></item></channel></rss>