vendor:
Snmppd SNMP proxy daemon
by:
cybertronic
5.5
CVSS
MEDIUM
Format String Vulnerability
134
CWE
Product Name: Snmppd SNMP proxy daemon
Affected Version From: snmppd-0.4.5
Affected Version To: snmppd-0.4.5
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2005
Snmppd SNMP proxy daemon format string exploit
This exploit takes advantage of a format string vulnerability in the Snmppd SNMP proxy daemon. The vulnerability allows an attacker to hijack the Global Offset Table (GOT) entry of the strdup function. The exploit is successful on the third attempt.
Mitigation:
The vendor should release a patch to fix the format string vulnerability in the Snmppd SNMP proxy daemon. In the meantime, users can mitigate the risk by using a firewall to restrict access to the affected daemon.
