Vulnerability Description
HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 characters, possibly triggering a buffer overflow.
CVSS Score
7.8
HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hp | Procurve Switch 4000M | c.07.23 |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0338.html
- http://www.iss.net/security_center/static/9708.phpVendor Advisory
- http://www.phenoelit.de/stuff/HP_ProCurve.txtExploitVendor Advisory
- http://www.securityfocus.com/bid/5336ExploitVendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0338.html
- http://www.iss.net/security_center/static/9708.phpVendor Advisory
- http://www.phenoelit.de/stuff/HP_ProCurve.txtExploitVendor Advisory
- http://www.securityfocus.com/bid/5336ExploitVendor Advisory
FAQ
What is CVE-2002-1426?
CVE-2002-1426 is a vulnerability with a CVSS score of 7.8 (HIGH). HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 characters, possibly triggering a buffer overflow.
How severe is CVE-2002-1426?
CVE-2002-1426 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-1426?
Check the references section above for vendor advisories and patch information. Affected products include: Hp Procurve Switch 4000M.