CVE-2004-2300: Ucd-SNMP

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.

Affected products

• Ucd-SNMP Ucd-SNMP: up to and including 4.2.6

Published 2004-12-31. Last modified 2026-06-16.