NVD

Id
72677  
Name
CVE-2004-2300  
Description
Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-2300  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
374672 72677 CVE-2004-2300 http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt  View
374673 72677 CVE-2004-2300 10396  View
374674 72677 CVE-2004-2300 ucd-snmpd-command-bo(16245)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62865 JVNDB-2004-000207 UCD-SNMP の snmpd デーモンにおけるバッファオーバーフローの脆弱性 UCD-SNMP に実装される snmpd デーモンには、snmpd コマンドの -p オプションにおいて、引数の長さの妥当性を適切に確認しないため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-2300 10725 CVE-2004-2300 72677 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000207.html 2004-05-21 2007-04-01 View