CVE-2004-1224: Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijac...

Security readout for executives and security teams

CVE-2004-1224 affects old mtr versions 0.55 through 0.65. A local user could abuse an off-by-one error in the curses key handling path to interfere with raw socket handling. This is not described as remotely exploitable, and the provided sources do not show active exploitation. Exposure is likely limited to Unix-like systems with mtr 0.55 through 0.65 installed and usable by local users. Risk is higher where mtr has elevated privileges for raw socket access. The bundle does not identify specific distributions or package names. Treat as a targeted legacy-host issue, not an internet-wide emergency. Prioritize if affected systems permit local users, shared shell access, or elevated mtr execution. For modern fleets, the main task is confirming the obsolete version is absent. Mitigation focus: Inventory mtr versions and flag 0.55 through 0.65.; Check operating system or distribution vendor guidance for the fixed package.; Remove or disable mtr where it is not operationally required..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.