What’s Vulnerable › Vulnerabilities
CVE-2003-0489
- Severity: high (CVSS 7.2 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2003-08-07 · updated 2026-06-16
Description
tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.
Affected products
- Michael C. Toren Tcptraceroute: through 1.4
References
Get alerted when CVE-2003-0489 or the next vulnerability affects your stack