Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : net-snmp vulnerability (USN-564-1)

Bill Trost discovered that snmpd did not properly limit GETBULK requests. A remote attacker could specify a large number of max-repetitions and cause a denial of service via resource exhaustion. Note that Tenable Network Security has extracted the preceding description block directly from the...

USN-564-1: Net-SNMP vulnerability

Bill Trost discovered that snmpd did not properly limit GETBULK requests. A remote attacker could specify a large number of max-repetitions and cause a denial of service via resource exhaustion...

openSUSE 10 Security Update : net-snmp (net-snmp-4759)

This update of net-snmp fixes the following bug : - default and configurable maximum number of varbinds returnable to a GETBULK request CVE-2007-5846 - crash when smux peers were configured with empty passwords %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE 10 Security Update : net-snmp (net-snmp-4753)

This update of net-snmp fixes the following bugs : - default and configurable maximum number of varbinds returnable to a GETBULK request CVE-2007-5846 - crash when smux peers were configured with empty passwords - the UCD-SNMP-MIB::memCached.0 SNMP object was missing - the snmptrap command from t...

SuSE 10 Security Update : net-snmp (ZYPP Patch Number 4755)

This update of net-snmp fixes the following bug : - default and configurable maximum number of varbinds returnable to a GETBULK request. CVE-2007-5846 - crash when smux peers were configured with empty passwords %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

Check Point response to NET-SNMP vulnerability CVE-2007-5846

...

DTSA-88-1 net-snmp - denial of service

Bulletin has no description...

Fedora 7 : net-snmp-5.4-16.fc7 (2007-3019)

Fri Oct 19 2007 Jan Safranek 5.4-16 - License: field fixed to 'BSD and CMU' - fix hrSWInst 250237 - fix leak in UDP transport 247771 - fix remote DoS attack CVE-2007-5846 - Mon Oct 8 2007 Jan Safranek 5.4-15 - License: field changed to MIT - fix segfault on parsing smuxpeer without password...

GLSA-200711-31 : Net-SNMP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200711-31 Net-SNMP: Denial of Service The SNMP agent snmpd does not properly handle GETBULK requests with an overly large 'max-repetitions' field. Impact : A remote unauthenticated attacker could send a specially crafted SNMP...

[SECURITY] Fedora 7 Update: net-snmp-5.4-16.fc7

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

Mandrake Linux Security Advisory : net-snmp (MDKSA-2007:225)

The SNMP agent in net-snmp 5.4.1 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value. Updated packages fix this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Net-SNMP: Denial of service

Background Net-SNMP is a collection of tools for generating and retrieving SNMP data. Description The SNMP agent snmpd does not properly handle GETBULK requests with an overly large "max-repetitions" field. Impact A remote unauthenticated attacker could send a specially crafted SNMP request to th...

[ MDKSA-2007:225 ] - Updated net-snmp packages fix remote denial of service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:225 http://www.mandriva.com/security/ Package : net-snmp Date : November 19, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: The SNMP agent in...

net-snmp DoS

CPU resources exhaustion on GETBULK with large max-repeaters parameter value...

Moderate: net-snmp security update

5.0.9-2.30E.23 - fix bulkwalk security flaw 366591...

RHEL 3 / 4 / 5 : net-snmp (RHSA-2007:1045)

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. Simple Network Management Protocol SNMP is a protocol used for network management. A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect ...

net security update

CentOS Errata and Security Advisory CESA-2007:1045 Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. Simple Network Management Protocol SNMP is a protocol used for network management. A flaw was discovered in the way net-snmp handled...

Moderate: Red Hat Security Advisory: net-snmp security update

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. Simple Network Management Protocol SNMP is a protocol used for network management. A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect ...

FreeBSD : net-snmp -- denial of service via GETBULK request (92f86b93-923f-11dc-a2bf-02e081235dab)

CVE reports : The SNMP agent snmpagent.c in net-snmp before 5.4.1 allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Ubuntu 6.06 LTS : net-snmp vulnerability (USN-456-1)

The SNMP service did not correctly handle TCP disconnects. Remote subagents could cause a denial of service if they dropped a connection at a specific time. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has...