Net-SNMP GETBULK远程拒绝服务漏洞

BUGTRAQ ID: 26378 CVECAN ID: CVE-2007-5846 Net-SNMP是一个免费的、开放源码的SNMP实现，以前称为UCD-SNMP。 Net-SNMP在处理畸形的SNMP GETBULK请求时存在漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 Net-SNMP没有正确地处理SNMP GETBULK请求，如果远程攻击者发送了包含有超长max-repetitions字段的畸形SNMP GETBULK请求的话，就可能导致耗尽大量CPU和内存资源。 0 Net-SNMP net-snmp 5.4.1...

CVE-2007-5846

Vulnerability summary (CVE-2007-5846) The net-snmp SNMP agent (snmp_agent.c) in versions before 5.4.1 is vulnerable to a remote denial-of-service when processing GETBULK requests with a large max-repeaters value, leading to CPU and memory exhaustion. Multiple trusted advisories confirm the issue ...

CVE-2006-5846

Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. dot dot in the page parameter, a different vector than CVE-2006-5773...

CVE-2006-5846

CVE-2006-5846 affects FreeWebshop 2.2.2 and earlier (index.php). The underlying issue is a directory traversal flaw that allows a remote attacker to read and include arbitrary files by manipulating the page parameter (via ..), a vector distinct from CVE-2006-5773. Impact is read/access of arbitra...