CVE-2004-2300

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.65% chance of exploitation in the next 30 days, 49th percentile

Published

2005-08-05

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt

References

• CVE Record
• NVD entry

Related

• CVE-2004-2299
• CVE-2004-2303
• CVE-2004-2297
• CVE-2004-2308
• CVE-2004-2295
• CVE-2004-2309