CVE-2003-0489: Michael C. Toren Tcptraceroute

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.

Affected products

• Michael C. Toren Tcptraceroute: up to and including 1.4

Published 2003-08-07. Last modified 2026-06-16.