← Vulnerability feed

Vulnerability record · CVE-2000-0172 · published 3 March 2000

CVE-2000-0172: Matt kimball and roger wolff mtr vulnerability

MMatt Kimball And Roger Wolff · Mtr

The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.

7.2 CVSS 2.0 High EPSS 0.82% · top 43.9%
7.2CVSS 2.0 base score
0.82%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
2References
16 Jun 2026Last modified by NVD

Description

The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

Track CVE-2000-0172 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-3625Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.8%10.0CVE-2000-0844Caldera openlinux ebuilder permissions and access controls vulnerabilitySome functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to exec…EPSS 16%7.5CVE-2004-0827Enlightenment imlib vulnerabilityMultiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of s…EPSS 5.5%7.5CVE-2000-0196Nmh vulnerabilityBuffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.EPSS 3.0%7.2CVE-2000-0438Caldera openlinux vulnerabilityBuffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.EPSS 1.1%7.2CVE-2000-0186Freebsd vulnerabilityBuffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.EPSS 0.42%7.2CVE-2000-0170Redhat linux vulnerabilityBuffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.EPSS 2.0%7.2CVE-2000-0052Mandrakesoft mandrake linux vulnerabilityRed Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.EPSS 0.89%

Source: NIST National Vulnerability Database (record CVE-2000-0172), CISA KEV, FIRST EPSS (scores of 2026-10-12). This page is refreshed as NVD updates the record.