Description
Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long community string in an SNMP TRAP packet.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Castle Rock Computing SNMPc < 7.1.1 - 'Community' Remote Buffer Overflow (PoC) EDB-7099 · dos · Nov 12, 2008 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 3886 third-party-advisory
- 28990 vdb-entry
- snmpc-snmptrap-bo(42104) vdb-entry
- ADV-2008-1403 vdb-entry
- 20080430 Critical Vulnerability in SNMPc mailing-list
- 30036 third-party-advisory
- 1019953 vdb-entry
- http://www.ngssoftware.com/advisories/critical-vulnerability-in-snmpc/