Description
Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Cisco IOS 11/12 - SNMP Message Denial of Service EDB-21296 · dos · Feb 12, 2002 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- RHSA-2001:163 vendor-advisory
- 57404 vendor-advisory
- MS02-006 vendor-advisory
- oval:org.mitre.oval:def:87 vdb-entry signature
- CA-2002-03 third-party-advisory
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html
- oval:org.mitre.oval:def:298 vdb-entry signature
- VU#854306 third-party-advisory
- 20020212 PROTOS Remote SNMP Attack Tool third-party-advisory