Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available.

Multiple Cisco products contain vulnerabilities in the processing of Simple Network Management Protocol (SNMP) messages. The vulnerabilities can be repeatedly exploited to produce a denial of service. In most cases, workarounds are available that may mitigate the impact. These vulnerabilities are identified by various groups as VU#617947, VU#107186, OUSPG #0100, CVE-2002-0012, and CVE-2002-0013.

The remote host is running an SNMPv1 server that uses a well-known community string - public 

A buffer overrun is present in the SNMP service on the remote host.  By sending a malformed management request, an attacker could cause a denial of service and possibly cause code to run on the system in the LocalSystem context.

ID	Name	Product	Family	Severity
48963	Malformed SNMP Message-Handling Vulnerabilities - Cisco Systems	Nessus	CISCO	critical
1344	SNMPv1 Public Community String (deprecated)	Nessus Network Monitor	SNMP	critical
10865	MS02-006: Malformed SNMP Management Request Remote Overflow (314147)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2002-0053

high

Tenable Plugins

critical

critical

critical