CVE-2005-4837

snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different vulnerability than CVE-2005-2177.

• CWE-16
• CWE-189

• http://secunia.com/advisories/25114Vendor Advisory
• http://secunia.com/advisories/25115Vendor Advisory
• http://secunia.com/advisories/25411Vendor Advisory
• http://sourceforge.net/tracker/index.php?func=detail&aid=1207023&group_id=12694&atid=112694Exploit
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102929-1
• http://www.securityfocus.com/bid/23762
• http://www.ubuntu.com/usn/USN-456-1
• http://www.vupen.com/english/advisories/2007/1944Vendor Advisory
• https://issues.rpath.com/browse/RPL-1334
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9442
• http://secunia.com/advisories/25114Vendor Advisory
• http://secunia.com/advisories/25115Vendor Advisory
• http://secunia.com/advisories/25411Vendor Advisory
• http://sourceforge.net/tracker/index.php?func=detail&aid=1207023&group_id=12694&atid=112694Exploit
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102929-1
• http://www.securityfocus.com/bid/23762
• http://www.ubuntu.com/usn/USN-456-1
• http://www.vupen.com/english/advisories/2007/1944Vendor Advisory
• https://issues.rpath.com/browse/RPL-1334
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9442

Published

Dec 31, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4831viewcvs in ViewCVS 0.9.2 allows remote attackers to set the …
• CVE-2005-4832SQL injection vulnerability in the Oracle Database Server 10…
• CVE-2005-4833IBM WebSphere Application Server (WAS) 6.0 before 20050201, …
• CVE-2005-4834IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1…
• CVE-2005-4835The ath_rate_sample function in the ath_rate/sample/sample.c…
• CVE-2005-4836The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.4…
• CVE-2005-4838Multiple cross-site scripting (XSS) vulnerabilities in the e…
• CVE-2005-4839PureTLS before 0.9b5 does not clear optional Extensions and …
• CVE-2005-4840The Outlook Express Address Book control, when using Interne…
• CVE-2005-4841The Outlook Progress Ctl control allows remote attackers to …
• CVE-2005-4842The System Monitor Source Properties control allows remote a…
• CVE-2005-4843The SmartConnect Class control allows remote attackers to ca…