A remote format string vulnerability has been discovered in the detecttr.c traceroute detection tool, initially released in Phrack magazine. The problem occurs due to erroneous usage of the syslog() function, potentially making it prone to format string attacks via malformed hostnames. Successful exploitation of this issue could allow an attacker to execute arbitrary code on a vulnerable system with the privileges of the user invoking detecttr.
A remote format string vulnerability has been discovered in the detecttr.c traceroute detection tool, initially released in Phrack magazine. The problem occurs due to erroneous usage of the syslog() function, potentially making it prone to format string attacks via malformed hostnames. Successful exploitation of this issue could allow an attacker to execute arbitrary code on a vulnerable system with the privileges of the user invoking detecttr.