What’s Vulnerable › Vulnerabilities

CVE-2002-1570

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-11-03 · updated 2026-06-16

Description

Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array.

Affected products

• Ucd-Snmp: through 4.2.3

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696
• http://www.securityfocus.com/archive/1/248141
• http://www.securityfocus.com/bid/3780
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7776
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696
• http://www.securityfocus.com/archive/1/248141
• http://www.securityfocus.com/bid/3780
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7776

Get alerted when CVE-2002-1570 or the next vulnerability affects your stack