CVE-2003-0745 - SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remot

CVE-2003-0745

Summary

SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decrypting the password that is returned by the server.

References

http://archives.neohapsis.com/archives/bugtraq/2003-08/0340.html

Vulnerable Configurations

cpe:2.3:a:castle_rock_computing:snmpc:5.1:*:*:*:*:*:*:*
cpe:2.3:a:castle_rock_computing:snmpc:5.1:*:*:*:*:*:*:*
cpe:2.3:a:castle_rock_computing:snmpc:6.0:*:*:*:*:*:*:*
cpe:2.3:a:castle_rock_computing:snmpc:6.0:*:*:*:*:*:*:*
cpe:2.3:a:castle_rock_computing:snmpc:6.0.5:*:*:*:*:*:*:*
cpe:2.3:a:castle_rock_computing:snmpc:6.0.5:*:*:*:*:*:*:*
cpe:2.3:a:castle_rock_computing:snmpc:6.0.8:*:*:*:*:*:*:*
cpe:2.3:a:castle_rock_computing:snmpc:6.0.8:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 10-09-2008 - 19:20)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bugtraq

20030825 SNMPc v5 and v6 remote vulnerability

Last major update

10-09-2008 - 19:20

Published

20-10-2003 - 04:00

Last modified

10-09-2008 - 19:20