Unrated severityNVD Advisory· Published Mar 3, 2000· Updated Jun 16, 2026

CVE-2000-0172

Description

The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.

LLM-synthesized narrative grounded in this CVE's description and references.

Mtr/Mtr3 versions
cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.28:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.28:*:*:*:*:*:*:*
- cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.41:*:*:*:*:*:*:*
- (no CPE)
Turbolinux/Turbolinux Server4 versions
cpe:2.3:o:turbolinux:turbolinux:3.5b2:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:turbolinux:turbolinux:3.5b2:*:*:*:*:*:*:*
- cpe:2.3:o:turbolinux:turbolinux:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:turbolinux:turbolinux:4.4:*:*:*:*:*:*:*
- cpe:2.3:o:turbolinux:turbolinux:6.0.2:*:*:*:*:*:*:*