Description
Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.redhat.com/support/errata/RHSA-2001-163.html ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57404-1 ↗
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A87 ↗
- http://www.cert.org/advisories/CA-2002-03.html ↗
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A298 ↗
- http://www.kb.cert.org/vuls/id/854306 ↗
- http://www.iss.net/security_center/alerts/advise110.php ↗