CVE-2002-1570

Опубликовано: 03 нояб. 2003

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array.

Ссылки

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696
http://www.securityfocus.com/archive/1/248141
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/3780
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7776
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696
http://www.securityfocus.com/archive/1/248141
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/3780
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7776

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ucd-snmp:ucd-snmp:*:*:*:*:*:*:*:*

Версия до 4.2.3 (включая)

EPSS

Процентиль: 94%

0.13951

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-1570

debian

больше 22 лет назад

Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earli ...

GHSA-89pr-2h9p-wqmv

github

почти 4 года назад