ucd-snmp ucd-snmp vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x prior to 5.2.4.1, 5.3.x prior to 5.3.2.1, and 5.4.x prior to 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 up to and including 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3R...

Juniper Session And Resource Control 2.0 Juniper Src Pe 1.0 Juniper Session And Resource Control 1.0 Juniper Src Pe 2.0

1 EDB exploit

7.5

CVSSv2

Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and previous versions, and net-snmp, allows remote malicious users to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data pa...

Ucd-snmp Ucd-snmp

1 EDB exploit

7.2

CVSSv2

Buffer overflow in snmpd in ucd-snmp 4.2.6 and previous versions, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid o...

Ucd-snmp Ucd-snmp

5

CVSSv2

Net-SNMP 5.0.x prior to 5.0.10.2, 5.2.x prior to 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote malicious users to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop.

Net-snmp Net-snmp 5.0.2 Net-snmp Net-snmp 5.0.3 Net-snmp Net-snmp 5.2 Net-snmp Net-snmp 5.2.1 Net-snmp Net-snmp 5.0.4 Pre2 Net-snmp Net-snmp 5.0.5 Net-snmp Net-snmp 5.0.6 Net-snmp Net-snmp 5.0.1 Net-snmp Net-snmp 5.0.10 Net-snmp Net-snmp 5.0.9 Net-snmp Net-snmp 5.1.3 Net-snmp Net-snmp 5.0 Net-snmp Net-snmp 5.0.7 Net-snmp Net-snmp 5.0.8

5

CVSSv2

The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 up to and including 5.0.5 allows remote malicious users to cause a denial of service (crash) via a NULL dereference.

Net-snmp Net-snmp 5.0.3 Net-snmp Net-snmp 5.0.4 Pre2 Net-snmp Net-snmp 5.0.1

5

CVSSv2

vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote malicious users to obtain sensitive information.

Ucd-snmp Ucd-snmp 3.52

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook