CVE-2002-1570

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696
http://www.securityfocus.com/archive/1/248141Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/3780Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7776
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696
http://www.securityfocus.com/archive/1/248141Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/3780Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7776

Timeline

Published: Nov 3, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-15712.1The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on proc CVE-2002-157210.0Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and at CVE-2002-157310.0Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack ve CVE-2002-15744.6Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors.CVE-2002-15755.0cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such a CVE-2002-15767.2lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to CVE-2002-15777.5SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1)CVE-2002-15787.5The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensi CVE-2002-15795.0SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates CVE-2002-15807.5Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length va CVE-2002-15815.0Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via CVE-2002-158210.0compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrar