CVE-2002-1570: Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attac...

Security readout for executives and security teams

This is an old heap buffer overflow in snmpnetstat from ucd-snmp/net-snmp. A malicious SNMP response pattern could make the tool write past allocated memory, potentially allowing code execution. Business risk is mainly legacy-system exposure, not modern widespread internet exposure based on the provided sources. Exposure is most likely on legacy Unix/Linux systems still carrying vulnerable ucd-snmp or net-snmp snmpnetstat components. Risk depends on whether snmpnetstat is installed and used to query untrusted or attacker-controlled SNMP agents. The bundle does not provide current package status or modern distribution impact. Prioritize as a legacy exposure cleanup item. Escalate if vulnerable snmpnetstat is present on production management hosts or used against untrusted networks. Without confirmed active exploitation or CVSS data, urgency depends on asset criticality and reachable SNMP workflows. Mitigation focus: Inventory systems for ucd-snmp, net-snmp, and snmpnetstat installations.; Check vendor advisories for corrected or supported replacement packages.; Remove snmpnetstat where it is not operationally required..

Prepared

Jun 30, 2026, 08:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.