Files
CVEs-PoC/2004/CVE-2004-2300.md
T
2024-06-18 02:51:15 +02:00

18 lines
819 B
Markdown

### [CVE-2004-2300](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2300)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.
### POC
#### Reference
- http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt
#### Github
No PoCs found on GitHub currently.