CVE-2002-1570

Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-11-03

Last modified

2024-08-08

Affected products

• Ucd-snmp (Ucd-snmp)

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696
• http://www.securityfocus.com/archive/1/248141
• http://www.securityfocus.com/bid/3780
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7776