CVE-2002-0013 Privilege escalation in n/a
Remote attackers can cause denial of service or gain privileges via malicious SNMPv1 requests in various implementations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-0013?
CVE-2002-0013 is a critical vulnerability in n/a, published on 18 Feb 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available.
Weakness: CWE-264
Which versions are affected by CVE-2002-0013?
It affects 1 product.
Products include Snmp Snmp.
How do I fix CVE-2002-0013?
No fix has been published for CVE-2002-0013 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-0013 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2002-0013 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-rq76-m97w-6r3m.