{"id":"CVE-2003-0489","details":"tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.","modified":"2026-04-10T03:36:11.016057Z","published":"2003-08-07T04:00:00Z","references":[{"type":"ADVISORY","url":"http://www.debian.org/security/2003/dsa-330"},{"type":"FIX","url":"http://www.debian.org/security/2003/dsa-330"}],"schema_version":"1.7.5"}