Description
Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available.
References
- RHSA-2001:163 vendor-advisory
- oval:org.mitre.oval:def:161 vdb-entry signature
- oval:org.mitre.oval:def:144 vdb-entry signature
- MS02-006 vendor-advisory
- 5043 vdb-entry
- HPSBMP0206-015 vendor-advisory
- CA-2002-03 third-party-advisory
- VU#107186 third-party-advisory
- oval:org.mitre.oval:def:1048 vdb-entry signature
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html
- oval:org.mitre.oval:def:298 vdb-entry signature
- 20020212 PROTOS Remote SNMP Attack Tool third-party-advisory