What’s Vulnerable › Vulnerabilities

CVE-2002-1364

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2002-12-23 · updated 2026-06-16

Description

Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses.

Affected products

• Ehud Gavron Tracesroute: 6.0, 6.1.1

References

• http://marc.info/?l=bugtraq&m=103858895600963&w=2
• http://www.debian.org/security/2003/dsa-254
• http://www.novell.com/linux/security/advisories/2002_043_traceroute_nanog_nkitb.html
• http://www.securityfocus.com/bid/6166
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10778
• http://marc.info/?l=bugtraq&m=103858895600963&w=2
• http://www.debian.org/security/2003/dsa-254
• http://www.novell.com/linux/security/advisories/2002_043_traceroute_nanog_nkitb.html
• http://www.securityfocus.com/bid/6166
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10778

Get alerted when CVE-2002-1364 or the next vulnerability affects your stack