CVE-2002-0497: Mtr

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable.

Affected products

• Mtr Mtr: version 0.41 only

Published 2002-08-12. Last modified 2026-06-16.