CVE-2002-0013 Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest,....
HighCVSS 10.0
EPSS 50.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| snmp | All versions | No fix listed |
References
- 57404 patch vendor-advisory
- CA-2002-03 third-party-advisory us-government-resource
- www.ee.oulu.fi
- 20020212 PROTOS Remote SNMP Attack Tool third-party-advisory vendor-advisory
- VU#854306 third-party-advisory us-government-resource
- RHSA-2001:163 vendor-advisory
- MS02-006 vendor-advisory
- oval:org.mitre.oval:def:298 signature vdb-entry
- oval:org.mitre.oval:def:87 signature vdb-entry