5 matches found
CVE-2015-6027: Improper Neutralization of Input During Web Page Generation
Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP...
PT-2017-6920
Name of the Vulnerable Software and Affected Versions Castle Rock Computing SNMPc versions prior to 2015-12-17 Description The issue allows for SQL injection via the sc parameter. Recommendations For versions prior to 2015-12-17, update to a version released after 2015-12-17 to resolve the issue...
CVE-2015-6028: Improper Neutralization of Special Elements used in an SQL Command
Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...
CVE-2008-2214: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet...
CVE-2007-3098: Undefined Security Weakness
The SNMPc Server crserv.exe process in Castle Rock Computing SNMPc before 7.0.19 allows remote attackers to cause a denial of service crash via a crafted packet to port 165/TCP...