Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Windows : Microsoft Bulletins >> Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run

Vulnerability Assessment Details

Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run

Vulnerability Assessment Summary
Acertains the presence of hotfix Q314147

Detailed Explanation for this Vulnerability Assessment

Summary :

Arbitrary code can be executed on the remote host.

Description :

A buffer overrun is present in the SNMP service on the remote host.
By sending a malformed management request, a possible hacker could cause a
denial of service and possibly cause code to run on the system in the
LocalSystem context.

Solution :

Microsoft has released a set of patches for Windows NT, 2000 and XP :

http://www.microsoft.com/technet/security/bulletin/ms02-006.mspx

Network Security Threat Level:

Critical / CVSS Base Score : 10
(AV:R/AC:L/Au:NR/C:C/A:C/I:C/B:N)

Networks Security ID: 4089

Vulnerability Assessment Copyright: This script is Copyright (C) 2006 Tenable Network Security

Cables, Connectors