Larscom Incorporated Information for VU#854306

Multiple vulnerabilities in SNMPv1 request handling

Status

Affected

Vendor Statement

      Larscom Incorporated has completed a preliminary examination of its product
      line in response to CA-2002-03. Larscom has identified a number of platforms
      that use SNMP, both V1 and V2. It is felt that those using SNMP V2 are not
      affected by the referenced vulnerabilities.

      A complete report listing the affected products and the recommended
      circumvention can be found at http://www.larscom.com/support/advisory/cert_ca_2002_03.pdf
      or can be requested from service@larscom.com.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References

None

Addendum

The CERT/CC has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.