CVE-2004-2300

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.

Affected products

Ucd-Snmp: through 4.2.6

References

http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt
http://www.securityfocus.com/bid/10396
https://exchange.xforce.ibmcloud.com/vulnerabilities/16245
http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt
http://www.securityfocus.com/bid/10396
https://exchange.xforce.ibmcloud.com/vulnerabilities/16245

Get alerted when CVE-2004-2300 or the next vulnerability affects your stack