MRLG CVE-2014-3931: 2014 Looking Glass Bug Added to KEV
MRLG is a niche looking-glass script, the vulnerable fastping helper was only used with Zebra/Quagga routers, and a fix has existed since 2014; only network operators still running an old MRLG need to act.
Must act: Network operators, ISPs and exchange points running an MRLG looking glass older than 5.5.0, especially if the fastping helper is installed setuid root.
Can relax: Everyone who does not run MRLG, which is nearly all companies outside network operations; other looking-glass packages are not affected by this CVE.
- Check web servers for an MRLG install and record its version.
- Find any setuid fastping binary with find / -name 'fastping*' -perm -4000 2>/dev/null and remove it or clear the setuid bit.
- Upgrade to MRLG 5.5.0 or replace the looking glass with currently maintained software.