Description (CNA)
mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| mtr / mtr | affected 0 through 0.95 |
CWE
CWE-829
References
- https://github.com/Homebrew/homebrew-core/issues/35085
- https://github.com/traviscross/mtr/blob/master/SECURITY
- https://github.com/traviscross/mtr/commit/5226f105f087c29d3cfad9f28000e7536af91ac6
ADP enrichment
No English description supplied.