1772 matches found
net-snmp -- fixproc insecure temporary file creation
A Gentoo advisory reports: Net-SNMP creates temporary files in an insecure manner, possibly allowing the execution of arbitrary code. A malicious local attacker could exploit a race condition to change the content of the temporary files before they are executed by fixproc, possibly leading to the...
Net-SNMP: fixproc insecure temporary file creation
Background Net-SNMP is a suite of applications used to implement the Simple Network Management Protocol. Description The fixproc application of Net-SNMP creates temporary files with predictable filenames. Impact A malicious local attacker could exploit a race condition to change the content of th...
CVE-2002-1170
Net-SNMP SNMP daemon (Net-SNMP/ucd-snmp) vulnerability CVE-2002-1170 affects 5.0.1–5.0.5. The issue resides in handle_var_requests() in snmp_agent.c, where a NULL dereference can occur while processing a crafted packet, leading to a denial-of-service crash. This is triggered by a loop that access...
CVE-2002-1170
The handlevarrequests function in snmpagent.c for the SNMP daemon in the Net-SNMP formerly ucd-snmp package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service crash via a NULL dereference...
CVE-2002-1170
The handlevarrequests function in snmpagent.c for the SNMP daemon in the Net-SNMP formerly ucd-snmp package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service crash via a NULL dereference...
CVE-2002-1170
The handlevarrequests function in snmpagent.c for the SNMP daemon in the Net-SNMP formerly ucd-snmp package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service crash via a NULL dereference...
CVE-2002-1170: Undefined Security Weakness
The handlevarrequests function in snmpagent.c for the SNMP daemon in the Net-SNMP formerly ucd-snmp package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service crash via a NULL dereference...
Mandrake Linux Security Advisory : net-snmp (MDKSA-2003:115)
A vulnerability in Net-SNMP versions prior to 5.0.9 could allow an existing user/community to gain access to data in MIB objects that were explicitly excluded from their view. The updated packages provide Net-SNMP version 5.0.9 which is not vulnerable to this issue and also fixes a number of othe...
RHEL 3 : net-snmp (RHSA-2004:023)
Updated Net-SNMP packages are available to correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MIB...
Moderate: Red Hat Security Advisory: net-snmp security update
Updated Net-SNMP packages are available that correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MI...
[RHSA-2003:335-01] Updated Net-SNMP packages fix security and other bugs
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated Net-SNMP packages fix security and other bugs Advisory ID: RHSA-2003:335-01 Issue date: 2003-12-02 Updated on: 2003-12-02 Product: Red...
Net-SNMP information leak
With knowledge of any community it's possible to gain access to all MIB objects...
Moderate: Red Hat Security Advisory: : Updated Net-SNMP packages fix security and other bugs
Updated Net-SNMP packages are available to correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MIB...
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
DEBIAN-CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2003-0935
Net-SNMP before 5.0.9 is vulnerable to an exposure issue where a user or community can access MIB data that should be restricted. Affected are Net-SNMP components that serve MIB data; the root cause is improper enforcement of MIB view permissions. Impact is data disclosure of restricted MIB objec...