10
CVSSv2

CVE-2005-1246

Published: 24/04/2005 Updated: 05/09/2008
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Format string vulnerability in the snmppd_log function in snmppd_util.c for snmppd 0.4.5 and previous versions may allow remote malicious users to cause a denial of service or execute arbitrary code via format string specifiers that are not properly handled in a syslog call.

Vulnerable Product Search on Vulmon Subscribe to Product

vladislav bogdanov snmppd 0.4.1

vladislav bogdanov snmppd 0.4.2

vladislav bogdanov snmppd 0.4.3

vladislav bogdanov snmppd 0.4.3_special

vladislav bogdanov snmppd 0.4.5

vladislav bogdanov snmppd 0.4

vladislav bogdanov snmppd 0.4.4

Exploits

/* * Snmppd SNMP proxy daemon format string exploit * * cybertronic[at]gmx[dot]net * * 04/29/2005 * * buffer space is 1024 bytes ( MAX_SNMPPD_OID_LEN defined in snmppd-045/snmppdh ) * * Apr 29 16:01:31 ctronic snmppd[6274]: fd 5: Request: XAAAA_804a81ebfffb9d40000352064666552203a7365757158203a7441414141 * * This is annoying ...