Net-snmp : Security Vulnerabilities, CVEs, Published In 2005
snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different vulnerability than CVE-2005-2177.
Max CVSS
10.0
EPSS Score
6.30%
Published
2005-12-31
Updated
2017-10-11
Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure DT_RPATH, which could allow local users to gain privileges.
Max CVSS
4.6
EPSS Score
0.04%
Published
2005-09-07
Updated
2008-09-05
Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop.
Max CVSS
5.0
EPSS Score
10.23%
Published
2005-07-11
Updated
2018-10-19
fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack.
Max CVSS
10.0
EPSS Score
0.05%
Published
2005-05-24
Updated
2017-10-11
4 vulnerabilities found