Lucene search

K
cveMitreCVE-2006-0250
HistoryJan 18, 2006 - 2:00 a.m.

CVE-2006-0250

2006-01-1802:00:00
mitre
web.nvd.nist.gov
73
cve-2006-0250
cmu snmp utilities
snmptrapd
format string vulnerability
remote code execution
snmp
udp port 162

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.132

Percentile

95.6%

Format string vulnerability in the snmp_input function in snmptrapd in CMU SNMP utilities (cmu-snmp) allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162.

Affected configurations

Nvd
Node
carnegie_mellon_universitysnmptrapdMatch3.6
OR
carnegie_mellon_universitysnmptrapdMatch3.7
VendorProductVersionCPE
carnegie_mellon_universitysnmptrapd3.6cpe:2.3:a:carnegie_mellon_university:snmptrapd:3.6:*:*:*:*:*:*:*
carnegie_mellon_universitysnmptrapd3.7cpe:2.3:a:carnegie_mellon_university:snmptrapd:3.7:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.132

Percentile

95.6%

Related for CVE-2006-0250