CVE:CVE-2000-0172
CNNVD:CNNVD-200003-009
mtr程序在尝试放弃特权时只使用一个seteuid调用。本地用户利用此漏洞可以提升根特权。
solution:Upgrade matt_kimball_and_roger_wolff mtr to a higher version than 0.28,0.41,and avoid the version 0.28,0.41; Upgrade turbolinux turbolinux to a higher version than 3.5b2,4.2,4.4,6.0.2,and avoid the version 3.5b2,4.2,4.4,6.0.2