GLSA-200901-15 : Net-SNMP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200901-15 Net-SNMP: Denial of Service Oscar Mira-Sanchez reported an integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c when processing GETBULK requests. Impact : A remote attacker could send a special...

Net-SNMP: Denial of service

Background Net-SNMP is a collection of tools for generating and retrieving SNMP data. Description Oscar Mira-Sanchez reported an integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c when processing GETBULK requests. Impact A remote attacker could send a specially crafte...

USN-685-1: Net-SNMP vulnerabilities

Wes Hardaker discovered that the SNMP service did not correctly validate HMAC authentication requests. An unauthenticated remote attacker could send specially crafted SNMPv3 traffic with a valid username and gain access to the user's views without a valid authentication passphrase. CVE-2008-0960...

openSUSE 10 Security Update : libsnmp15 (libsnmp15-5808)

Remote attackers could crash net-snmp via GETBULK-Request CVE-2008-4309. In addition the following non-security issues have been fixed : - typo in error message bnc439857 - fix duplicate registration warnings on startup bnc326957 - container insert errors reproducable with shared ip setups...

[SECURITY] Fedora 10 Update: net-snmp-5.4.2.1-1.fc10

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

FreeBSD Ports: net-snmp

The remote host is missing an update to the system as announced in the referenced advisory. VID daf045d7-b211-11dd-a987-000c29ca8953 OpenVAS Vulnerability Test $ Description: Auto generated from VID daf045d7-b211-11dd-a987-000c29ca8953 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1663-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: net-snmp

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Slackware 12.0 / 12.1 / current : net-snmp (SSA:2008-320-02)

New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix a denial of service issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-320-02. The text itself is...

[slackware-security] net-snmp

New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix a denial of service issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-4309 Here are the details from the Slackware 12.1...

Castle Rock Computing SNMPc < 7.1.1 (Community) Remote BOF PoC

No description provided by source. !usr/bin/perl -w Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet. Refer:...

Net-SNMP <= 5.1.4/5.2.4/5.4.1 Perl Module Buffer Overflow PoC

No description provided by source. !usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large OCTETSTRING in a...

netsnmp-overflow.txt

!usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair AVP. Refer:...

Castle Rock Computing SNMPc < 7.1.1 (Community) Remote BOF PoC

Exploit for unknown platform in category dos / poc ============================================================== Castle Rock Computing SNMPc 7.1.1 Community Remote BOF PoC ============================================================== !usr/bin/perl -w Stack-based buffer overflow in the Network...

Net-SNMP <= 5.1.4/5.2.4/5.4.1 Perl Module Buffer Overflow PoC

Exploit for linux platform in category dos / poc ============================================================= Net-SNMP = 5.1.4/5.2.4/5.4.1 Perl Module Buffer Overflow PoC ============================================================= !usr/bin/perl -w Buffer overflow in the snprintvalue function i...

Net-SNMP 5.1.45.2.45.4.1 Perl Module - Buffer Overflow (PoC)

Net-SNMP 5.1.45.2.45.4.1 Perl Module - Buffer Overflow PoC !usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via ...

Net-SNMP 5.1.4/5.2.4/5.4.1 Perl Module - Buffer Overflow (PoC)

!usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair AVP. Refer:...

[SECURITY] [DSA 1663-1] New net-snmp packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1663-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 09, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1663-1] New net-snmp packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1663-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 09, 2008 http://www.debian.org/security/faq -...

Debian DSA-1663-1 : net-snmp - several vulnerabilities

Several vulnerabilities have been discovered in NET SNMP, a suite of Simple Network Management Protocol applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0960 Wes Hardaker reported that the SNMPv3 HMAC verification relies on the client t...