Test ID:	1.3.6.1.4.1.25623.1.0.10987
Category:	CISCO
Title:	CSCdw67458
Summary:	Uses SNMP to determine if a flaw is present
Description:	There is a vulnerability in the way the remote device handles SNMP messages. An attacker may use this flaw to crash the remote device continuously This vulnerability is documented as Cisco bug ID CSCdw67458. Solution : http://www.cisco.com/warp/public/707/cisco-malformed-snmp-msgs-non-ios-pub.shtml Reference : http://online.securityfocus.com/archive/1/255807 Risk factor : High *** As Nessus solely relied on the banner of the remote host *** this might be a false positive
Cross-Ref:	BugTraq ID: 4088 Common Vulnerability Exposure (CVE) ID: CVE-2002-0012 http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html http://www.cert.org/advisories/CA-2002-03.html ISS Security Advisory: 20020212 PROTOS Remote SNMP Attack Tool http://www.iss.net/security_center/alerts/advise110.php CERT/CC vulnerability note: VU#107186 http://www.kb.cert.org/vuls/id/107186 http://www.redhat.com/support/errata/RHSA-2001-163.html Caldera Security Advisory: CSSA-2002-SCO.4 HPdes Security Advisory: HPSBMP0206-015 http://www.securityfocus.com/advisories/4211 SGI Security Advisory: 20020201-01-A ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A http://www.microsoft.com/technet/security/bulletin/MS02-006.asp BugTraq ID: 5043 http://www.securityfocus.com/bid/5043 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:144 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:161 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:298 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1048 Common Vulnerability Exposure (CVE) ID: CVE-2002-0013 CERT/CC vulnerability note: VU#854306 http://www.kb.cert.org/vuls/id/854306 http://sunsolve.sun.com/search/document.do?assetkey=1-26-57404-1 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:87
Copyright	This script is (C) 2002 Renaud Deraison

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: