Vulnerability in Net-Snmp

CVE-2002-1170

The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference.

EPSS: 0.018 (76.8th percentile) — read the EPSS interpretation.

Affected products

  • Net-snmp — versions 5.0.1, 5.0.3, 5.0.4_pre2
  • N/a — versions n/a

References