$ cve CVE-2000-0949 JSON

CVE-2000-0949 EXPLOIT

7.2

HIGH · CVSS 2.0 · EPSS 1.2% (pctl 67)

Patch early

A public exploit exists.

Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.

CVSS	7.2 (HIGH, v2.0)
Vector	AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS	1.18% — more likely to be exploited than 67% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2000-12-19
Last modified	2026-09-23

Vendor	Product
lbl	lbl traceroute
sun	sunos

Source	Title	Date
exploit-db	LBL Traceroute - Local Privilege Escalation	2000-11-15
exploit-db	LBL Traceroute 1.4 a5 - Heap Corruption (1)	2000-09-28
exploit-db	LBL Traceroute 1.4 a5 - Heap Corruption (2)	2000-09-28
exploit-db	LBL Traceroute 1.4 a5 - Heap Corruption (3)	2000-09-28