CVE-2002-1170
published 2002-10-11CVE-2002-1170: The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to…
PriorityP414medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.84%
76.6th percentile
The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | net-snmp | < net-snmp 5.0.6 (bookworm) | net-snmp 5.0.6 (bookworm) |
| net-snmp | net-snmp | — | — |
| net-snmp | net-snmp | — | — |
| net-snmp | net-snmp | — | — |
| net-snmp | net-snmp | >= 0 < 5.0.6 | 5.0.6 |
| net-snmp | net-snmp | >= 0 < 5.0.6 | 5.0.6 |
| net-snmp | net-snmp | >= 0 < 5.0.6 | 5.0.6 |
| net-snmp | net-snmp | >= 0 < 5.0.6 | 5.0.6 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2002-10-02·CVSS 5.0
CVE-2002-1170 [MEDIUM] security flaw
security flaw
The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference.
Debian
CVE-2002-1170: net-snmp - The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-...
vendor_debian·2002·CVSS 5.0
CVE-2002-1170 [MEDIUM] CVE-2002-1170: net-snmp - The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-...
The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference.
Scope: local
bookworm: resolved (fixed in 5.0.6)
bullseye: resolved (fixed in 5.0.6)
forky: resolved (fixed in 5.0.6)
sid: resolved (fixed in 5.0.6)
trixie: resolved (fixed in 5.0.6)
GHSA
GHSA-5j37-qvcv-4rf2: The handle_var_requests function in snmp_agent
ghsa_unreviewed·2022-04-30
CVE-2002-1170 [MEDIUM] GHSA-5j37-qvcv-4rf2: The handle_var_requests function in snmp_agent
The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference.
OSV
CVE-2002-1170: The handle_var_requests function in snmp_agent
osv·2002-10-11·CVSS 5.0
CVE-2002-1170 [MEDIUM] CVE-2002-1170: The handle_var_requests function in snmp_agent
The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference.
No detection rules found.
No public exploits indexed.
http://marc.info/?l=bugtraq&m=103359362020365&w=2http://sourceforge.net/forum/forum.php?forum_id=216532http://www.idefense.com/advisory/10.02.02.txthttp://www.redhat.com/support/errata/RHSA-2002-228.htmlhttp://www.securityfocus.com/bid/5862https://exchange.xforce.ibmcloud.com/vulnerabilities/10250http://marc.info/?l=bugtraq&m=103359362020365&w=2http://sourceforge.net/forum/forum.php?forum_id=216532http://www.idefense.com/advisory/10.02.02.txthttp://www.redhat.com/support/errata/RHSA-2002-228.htmlhttp://www.securityfocus.com/bid/5862https://exchange.xforce.ibmcloud.com/vulnerabilities/10250
2002-10-11
Published