7.2

CVE-2004-2300

Exploit
Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument.  NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ucd-snmp ≫ Ucd-snmp Version <= 4.2.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.65% 0.461
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt
Vendor Advisory
Exploit
http://www.securityfocus.com/bid/10396
https://exchange.xforce.ibmcloud.com/vulnerabilities/16245