Lucene search

K
cveMitreCVE-2004-2300
HistoryAug 05, 2005 - 4:00 a.m.

CVE-2004-2300

2005-08-0504:00:00
mitre
web.nvd.nist.gov
39
cve-2004-2300
buffer overflow
snmp
ucd-snmp
local users
security vulnerability

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0

Percentile

5.1%

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.

Affected configurations

Nvd
Node
ucd-snmpucd-snmpRange4.2.6
VendorProductVersionCPE
ucd-snmpucd-snmp*cpe:2.3:a:ucd-snmp:ucd-snmp:*:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2004-2300