CVE

Id
4406  
CVE No.
CVE-2002-0012  
Status
Candidate  
Description
Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available.  
Phase
Modified (20061101)  
Votes
ACCEPT(6) Cole, Foat, Green, Jones, Wall, Ziese | REVIEWING(1) Christey  
Comments
Christey> This candidate is at a higher level of abstraction (more | general) than most other candidates. CVE"s content | decisions suggest that we should provide different candidates | for each implementation and type of bug that is affected by | the PROTOS suite. | | However, as of this writing (Feb 12, 2002), there is | insufficient information to assign the proper number of | candidates. This high-level candidate will serve as a | "catch-all," but we will be assigning lower-level (more | specific) candidates when there is more information. | | Due to the size and extent of this problem, it is better to | have a high-level candidate than no candidate at all. | Ziese> ACKNOWLEDGED-BY-VENDOR | Christey> DEBIAN:DSA-111 | MANDRAKE:MDKSA-2002:014 | CHANGE> [Christey changed vote from NOOP to REVIEWING] | Christey> CALDERA:CSSA-2002-004.0 | Christey> Consider adding BID:4088 | Christey> ADDREF SGI:20020404-01-P, which discusses the "hpsnmpd" daemon. | Christey> COMPAQ:SSRT0799 | CONECTIVA:CLA-2002:462 | BID:4088 | DEBIAN:DSA-111 | HP:HPSBUX0202-184 | URL:http://online.securityfocus.com/advisories/4032 | CISCO:20020212 Malformed SNMP Message-Handling Vulnerabilities | CISCO:20020212 Malformed SNMP Message-Handling Vulnerabilities for Cisco Non-IOS Products | MANDRAKE:MDKSA-2002:014 | FREEBSD:FreeBSD-SA-02:11 | Christey> SUSE:SuSE-SA:2002:012 | | Should also mention ucd-snmp package by name. | BUGTRAQ:20020824 NOVL-2002-2961546 - SNMPv1 Trap and Request Handling Vulnerabilities | URL:http://archives.neohapsis.com/archives/bugtraq/2002-08/0295.html | HP:HPSBMP0206-015 | URL:http://archives.neohapsis.com/archives/hp/2002-q4/0010.html | CALDERA:CSSA-2002-SCO.25 | URL:http://archives.neohapsis.com/archives/linux/caldera/2002-q2/0024.html | CALDERA:CSSA-2002-004.1 | URL:ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2002-004.1 | BUGTRAQ:20020227 nCipher Security Advisory #2: SNMP vulnerabilities | URL:http://archives.neohapsis.com/archives/bugtraq/2002-02/0353.html | Christey> REDHAT:RHSA-2002:036 | URL:http://www.redhat.com/support/errata/RHSA-2002-036.html  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
21152 4406 CVE-2002-0012 MISC:http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html  View
21153 4406 CVE-2002-0012 CERT:CA-2002-03  View
21154 4406 CVE-2002-0012 URL:http://www.cert.org/advisories/CA-2002-03.html  View
21155 4406 CVE-2002-0012 ISS:20020212 PROTOS Remote SNMP Attack Tool  View
21156 4406 CVE-2002-0012 URL:http://www.iss.net/security_center/alerts/advise110.php  View
21157 4406 CVE-2002-0012 CERT-VN:VU#107186  View
21158 4406 CVE-2002-0012 URL:http://www.kb.cert.org/vuls/id/107186  View
21159 4406 CVE-2002-0012 REDHAT:RHSA-2001:163  View
21160 4406 CVE-2002-0012 URL:http://www.redhat.com/support/errata/RHSA-2001-163.html  View
21161 4406 CVE-2002-0012 CALDERA:CSSA-2002-SCO.4  View
21162 4406 CVE-2002-0012 HP:HPSBMP0206-015  View
21163 4406 CVE-2002-0012 URL:http://www.securityfocus.com/advisories/4211  View
21164 4406 CVE-2002-0012 SGI:20020201-01-A  View
21165 4406 CVE-2002-0012 URL:ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A  View
21166 4406 CVE-2002-0012 MS:MS02-006  View
21167 4406 CVE-2002-0012 URL:http://www.microsoft.com/technet/security/bulletin/MS02-006.asp  View
21168 4406 CVE-2002-0012 BID:5043  View
21169 4406 CVE-2002-0012 URL:http://www.securityfocus.com/bid/5043  View
21170 4406 CVE-2002-0012 OVAL:oval:org.mitre.oval:def:144  View
21171 4406 CVE-2002-0012 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:144  View
21172 4406 CVE-2002-0012 OVAL:oval:org.mitre.oval:def:161  View
21173 4406 CVE-2002-0012 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:161  View
21174 4406 CVE-2002-0012 OVAL:oval:org.mitre.oval:def:298  View
21175 4406 CVE-2002-0012 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:298  View
21176 4406 CVE-2002-0012 OVAL:oval:org.mitre.oval:def:1048  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63706 JVNDB-2002-000033 複数ベンダ製品の SNMP Trap におけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2002-0012 4406 10 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000033.html  View