CVE-2005-2177

The CVE-2005-2177 issue affects Net-SNMP 5.0.x (before 5.0.10.2), 5.2.x (before 5.2.1.2), and 5.1.3 when using stream sockets (TCP). A crafted TCP segment of length 1 can trigger an infinite loop, causing remote denial of service through daemon hang and high CPU usage. Related advisories in OSV/O...

[SA15930] Net-snmp Stream-based Protocol Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

net-snmp TCP DoS

Error during connection-oriented protocols parsing...

net-snmp -- remote DoS vulnerability

A Net-SNMP release announcement reports: A security vulnerability has been found in Net-SNMP releases that could allow a denial of service attack against Net-SNMP agent's which have opened a stream based protocol EG, TCP but not UDP; it should be noted that Net-SNMP does not by default open a TCP...

GLSA-200505-18 : Net-SNMP: fixproc insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200505-18 Net-SNMP: fixproc insecure temporary file creation The fixproc application of Net-SNMP creates temporary files with predictable filenames. Impact : A malicious local attacker could exploit a race condition to change the...

CVE-2005-1740

Net-SNMP vulnerability CVE-2005-1740 arises from fixproc creating insecure temporary files, enabling a local user to modify file contents and potentially trigger arbitrary command execution, or overwrite files via a symlink attack. Affected component is the fixproc utility in Net-SNMP 5.x prior t...

CVE-2005-1740

fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack...

CVE-2005-1740

fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack...

CVE-2005-1740

fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack...

CVE-2005-1740

fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack...

net-snmp -- fixproc insecure temporary file creation

A Gentoo advisory reports: Net-SNMP creates temporary files in an insecure manner, possibly allowing the execution of arbitrary code. A malicious local attacker could exploit a race condition to change the content of the temporary files before they are executed by fixproc, possibly leading to the...

Net-SNMP: fixproc insecure temporary file creation

Background Net-SNMP is a suite of applications used to implement the Simple Network Management Protocol. Description The fixproc application of Net-SNMP creates temporary files with predictable filenames. Impact A malicious local attacker could exploit a race condition to change the content of th...

CVE-2002-1170

Net-SNMP SNMP daemon (Net-SNMP/ucd-snmp) vulnerability CVE-2002-1170 affects 5.0.1–5.0.5. The issue resides in handle_var_requests() in snmp_agent.c, where a NULL dereference can occur while processing a crafted packet, leading to a denial-of-service crash. This is triggered by a loop that access...

CVE-2002-1170

The handlevarrequests function in snmpagent.c for the SNMP daemon in the Net-SNMP formerly ucd-snmp package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service crash via a NULL dereference...

CVE-2002-1170

The handlevarrequests function in snmpagent.c for the SNMP daemon in the Net-SNMP formerly ucd-snmp package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service crash via a NULL dereference...

Mandrake Linux Security Advisory : net-snmp (MDKSA-2003:115)

A vulnerability in Net-SNMP versions prior to 5.0.9 could allow an existing user/community to gain access to data in MIB objects that were explicitly excluded from their view. The updated packages provide Net-SNMP version 5.0.9 which is not vulnerable to this issue and also fixes a number of othe...

RHEL 3 : net-snmp (RHSA-2004:023)

Updated Net-SNMP packages are available to correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MIB...

Moderate: Red Hat Security Advisory: net-snmp security update

Updated Net-SNMP packages are available that correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MI...

Net-SNMP information leak

With knowledge of any community it's possible to gain access to all MIB objects...

[RHSA-2003:335-01] Updated Net-SNMP packages fix security and other bugs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated Net-SNMP packages fix security and other bugs Advisory ID: RHSA-2003:335-01 Issue date: 2003-12-02 Updated on: 2003-12-02 Product: Red...