CVE-2002-1170: Net-SNMP

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference.

Affected products

• Net-SNMP Net-SNMP: version 5.0.1 only; version 5.0.3 only; version 5.0.4_pre2 only

Published 2002-10-11. Last modified 2026-06-16.