Lucene search
RedHatRHSA-2008:0528HistoryJun 10, 2008 - 12:00 a.m.
(RHSA-2008:0528) Moderate: ucd-snmp security update
2008-06-1000:00:00
access.redhat.com
9
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.969 High
EPSS
Percentile
99.6%
The Simple Network Management Protocol (SNMP) is a protocol used for
network management.
A flaw was found in the way ucd-snmp checked an SNMPv3 packet’s Keyed-Hash
Message Authentication Code (HMAC). An attacker could use this flaw to
spoof an authenticated SNMPv3 packet. (CVE-2008-0960)
All users of ucd-snmp should upgrade to these updated packages, which
contain a backported patch to resolve this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | any | i386 | ucd-snmp-devel | < 4.2.5-8.AS21.7 | ucd-snmp-devel-4.2.5-8.AS21.7.i386.rpm |
| RedHat | any | ia64 | ucd-snmp-devel | < 4.2.5-8.AS21.7 | ucd-snmp-devel-4.2.5-8.AS21.7.ia64.rpm |
| RedHat | any | ia64 | ucd-snmp | < 4.2.5-8.AS21.7 | ucd-snmp-4.2.5-8.AS21.7.ia64.rpm |
| RedHat | any | i386 | ucd-snmp | < 4.2.5-8.AS21.7 | ucd-snmp-4.2.5-8.AS21.7.i386.rpm |
| RedHat | any | i386 | ucd-snmp-utils | < 4.2.5-8.AS21.7 | ucd-snmp-utils-4.2.5-8.AS21.7.i386.rpm |
| RedHat | any | ia64 | ucd-snmp-utils | < 4.2.5-8.AS21.7 | ucd-snmp-utils-4.2.5-8.AS21.7.ia64.rpm |
Related
checkpoint_advisories
checkpoint_advisories
Multiple Vendor SNMPv3 HMAC Handling Authentication Bypass (CVE-2008-0960)
2008-06-22 00:00:00
openvas
openvas
RedHat Update for ucd-snmp RHSA-2008:0528-01
2009-03-06 00:00:00
CentOS Update for ucd-snmp CESA-2008:0528-01 centos2 i386
2009-02-27 00:00:00
CentOS Update for ucd-snmp CESA-2008:0528-01 centos2 i386
2009-02-27 00:00:00
nessus
nessus
SNMP Version 3 Authentication Vulnerabilities (cisco-sa-20080610-snmpv3)
2013-12-14 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_SNMPV3
2008-06-10 18:32:00
prion
prion
Authentication flaw
2008-06-10 18:32:00
securityvulns
securityvulns
Multiple SNMPv3 authentication implementations bypass
2008-06-10 00:00:00
Cisco Security Advisory: SNMP Version 3 Authentication Vulnerabilities
2008-06-10 00:00:00
[oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing
2008-06-10 00:00:00
checkpoint_security
checkpoint_security
Check Point response to NET-SNMP vulnerability CVE-2008-0960
2008-06-04 21:00:00
f5
f5
SOL8939 - SNMPv3 HMAC verification vulnerability CVE-2008-0960 - VU#878044
2008-07-15 00:00:00
SOL9025 - FirePass SNMP DoS vulnerability
2008-07-31 00:00:00
K9025 : FirePass SNMP DoS vulnerability
2013-03-18 00:00:00
exploitpack
exploitpack
SNMPv3 - HMAC Validation error Remote Authentication Bypass
2008-06-12 00:00:00
debiancve
debiancve
CVE-2008-0960
2008-06-10 18:32:00
ubuntucve
ubuntucve
CVE-2008-0960
2008-06-10 00:00:00
seebug
seebug
SNMPv3 HMAC validation error Remote Authentication Bypass Exploit
2008-06-12 00:00:00
Net-SNMP远程绕过认证漏洞
2008-06-14 00:00:00
cisco
cisco
SNMP Version 3 Authentication Vulnerabilities
2008-06-10 00:00:00
veracode
veracode
Authentication Bypass
2020-04-10 00:31:19
cve
cve
CVE-2008-0960
2008-06-10 18:32:00
centos
centos
ucd security update
2008-06-10 23:24:29
net security update
2008-06-10 20:39:52
exploitdb
exploitdb
SNMPv3 - HMAC Validation error Remote Authentication Bypass
2008-06-12 00:00:00
cert
cert
SNMPv3 improper HMAC validation allows authentication bypass
2008-06-10 00:00:00
oraclelinux
oraclelinux
net-snmp security update
2008-06-10 00:00:00
redhat
redhat
(RHSA-2008:0529) Moderate: net-snmp security update
2008-06-10 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: net-snmp-5.4.1-7.fc8
2008-06-11 04:39:34
[SECURITY] Fedora 9 Update: net-snmp-5.4.1-18.fc9
2008-06-11 04:39:24
[SECURITY] Fedora 7 Update: net-snmp-5.4-18.fc7
2008-06-11 04:39:52
gentoo
gentoo
Net-SNMP: Multiple vulnerabilities
2008-08-06 00:00:00
slackware
slackware
[slackware-security] net-snmp
2008-07-29 05:33:31
debian
debian
[SECURITY] [DSA 1663-1] New net-snmp packages fix several vulnerabilities
2008-11-09 09:49:16
osv
osv
net-snmp - several vulnerabilities
2008-11-09 00:00:00
ubuntu
ubuntu
Net-SNMP vulnerabilities
2008-12-03 00:00:00
vmware
vmware
Updated ESX packages for libxml2, ucd-snmp, libtiff
2008-10-31 00:00:00
Updated ESX packages for libxml2, ucd-snmp, libtiff
2008-10-31 00:00:00
Updated ESX packages for OpenSSL, net-snmp, perl
2008-08-12 00:00:00
suse
suse
authentication bypass, denial-of-service in net-snmp
2008-08-01 13:33:56
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.969 High
EPSS
Percentile
99.6%
Related for RHSA-2008:0528