NVD

Id
2213  
Name
CVE-2008-2292  
Description
Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-05-18  
Modified Date
2012-11-26  
Seq
2008-2292  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14059 2213 CVE-2008-2292 SUSE-SA:2008:039  View
14060 2213 CVE-2008-2292 oval:org.mitre.oval:def:11261  View
14061 2213 CVE-2008-2292 GLSA-200808-02  View
14062 2213 CVE-2008-2292 http://sourceforge.net/tracker/index.php?func=detail&aid=1826174&group_id=12694&atid=112694  View
14063 2213 CVE-2008-2292 239785  View
14064 2213 CVE-2008-2292 http://support.avaya.com/elmodocs2/security/ASA-2008-282.htm  View
14065 2213 CVE-2008-2292 DSA-1663  View
14066 2213 CVE-2008-2292 MDVSA-2008:118  View
14067 2213 CVE-2008-2292 RHSA-2008:0529  View
14068 2213 CVE-2008-2292 29212  View
14069 2213 CVE-2008-2292 1020527  View
14070 2213 CVE-2008-2292 USN-685-1  View
14071 2213 CVE-2008-2292 http://www.vmware.com/security/advisories/VMSA-2008-0013.html  View
14072 2213 CVE-2008-2292 ADV-2008-1528  View
14073 2213 CVE-2008-2292 ADV-2008-2141  View
14074 2213 CVE-2008-2292 ADV-2008-2361  View
14075 2213 CVE-2008-2292 netsnmp-snprintvalue-bo(42430)  View
14076 2213 CVE-2008-2292 FEDORA-2008-5215  View
14077 2213 CVE-2008-2292 FEDORA-2008-5224  View
14078 2213 CVE-2008-2292 FEDORA-2008-5218  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46136 JVNDB-2008-001446 Net_SNMP の Perl モジュールにおける任意のコードを実行される脆弱性 Net-SNMP の Perl モジュール における __snprint_value 関数には、属性値ペア (AVP) 内の大きな OCTETSTRING の処理に不備があり、サービス運用妨害 (DoS) 状態にされる、または任意のコードが実行される脆弱性が存在します。 CVE-2008-2292 32405 CVE-2008-2292 2213 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001446.html 2008-06-11 2008-11-10 View