CVE-2012-2141

Array index error in the handlensExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service out-of-bounds read and snmpd crash via an SNMP GET request for an entry not in the extension table...

Out-of-bounds

Array index error in the handlensExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service out-of-bounds read and snmpd crash via an SNMP GET request for an entry not in the extension table...

CVE-2012-2141

Array index error in the handlensExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service out-of-bounds read and snmpd crash via an SNMP GET request for an entry not in the extension table...

CVE-2012-2141

CVE-2012-2141 is a Net-SNMP denial-of-service vulnerability: an array index error in handle_nsExtendOutput2Table (extend.c) on SNMP GET to an extension-table entry can trigger an out-of-bounds read and crash snmpd. It affects Net-SNMP 5.7.1 (and older) when processing requests for non-existent ex...

CVE-2012-2141

Array index error in the handlensExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service out-of-bounds read and snmpd crash via an SNMP GET request for an entry not in the extension table...

Scientific Linux Security Update : net-snmp on SL3.x i386/x86_64

It was discovered that the snmpd daemon did not use TCP wrappers correctly, causing network hosts access restrictions defined in '/etc/hosts.allow' and '/etc/hosts.deny' to not be honored. A remote attacker could use this flaw to bypass intended access restrictions. CVE-2008-6123 This issue only...

Scientific Linux Security Update : net-snmp on SL6.x i386/x86_64 (20120620)

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command...

Scientific Linux Security Update : net-snmp on SL3.x, SL4.x, SL5.x i386/x86_64

A flaw was found in the way Net-SNMP checked an SNMPv3 packet's Keyed-Hash Message Authentication Code HMAC. An attacker could use this flaw to spoof an authenticated SNMPv3 packet. CVE-2008-0960 A buffer overflow was found in the Perl bindings for Net-SNMP. This could be exploited if an attacker...

Scientific Linux Security Update : net-snmp on SL5.x, SL4.x, SL3.x i386/x86_64

A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect to the snmpd UDP port 161 by default could send a malicious packet causing snmpd to crash, resulting in a denial of service. CVE-2007-5846 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : net-snmp on SL3.x, SL4.x, SL5.x i386/x86_64

A denial-of-service flaw was found in the way Net-SNMP processes SNMP GETBULK requests. A remote attacker who issued a specially crafted request could cause the snmpd server to crash. CVE-2008-4309 Note: An attacker must have read access to the SNMP server in order to exploit this flaw. In the...

Scientific Linux Security Update : net-snmp on SL3.x i386/x86_64

A divide-by-zero flaw was discovered in the snmpd daemon. A remote attacker could issue a specially crafted GETBULK request that could crash the snmpd daemon. CVE-2009-1887 Note: An attacker must have read access to the SNMP server in order to exploit this flaw. In the default configuration, the...

CentOS Update for net-snmp CESA-2012:0876 centos6

Check for the Version of net-snmp OpenVAS Vulnerability Test CentOS Update for net-snmp CESA-2012:0876 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for net-snmp CESA-2012:0876 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 10 Security Update : net-snmp (ZYPP Patch Number 8153)

This update to net-snmp resolves the following issues : - Specially crafted SNMP GET requests could cause a denial of service application crash via a heap-based out-out-bounds read flaw which could be exploited remotely. CVE-2012-2141 - After rotating the net-snmp log file, use 'try-restart' to...

CentOS 6 : net-snmp (CESA-2012:0876)

Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

net security update

CentOS Errata and Security Advisory CESA-2012:0876 Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring...

Medium: net-snmp

Issue Overview: An array index error, leading to an out-of-bounds buffer read flaw, was found in the way the net-snmp agent looked up entries in the extension table. A remote attacker with read privileges to a Management Information Base MIB subtree handled by the "extend" directive in...

net-snmp security and bug fix update

1:5.5-41 - moved /var/lib/net-snmp fro net-snmp to net-snmp-libs package 822480 1:5.5-40 - fixed CVE-2012-2141 820100 1:5.5-39 - fixed proxying of out-of-tree GETNEXT requests 799291 1:5.5-38 - fixed snmpd crashing with many AgentX subagent 749227 - fixed SNMPv2-MIB::sysObjectID value when...

[ MDVSA-2012:099 ] net-snmp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:099 http://www.mandriva.com/security/ Package : net-snmp Date : June 21, 2012 Affected: 2010.1, 2011., Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and corrected in net-snmp...

Mandriva Update for net-snmp MDVSA-2012:099 (net-snmp)

Check for the Version of net-snmp OpenVAS Vulnerability Test Mandriva Update for net-snmp MDVSA-2012:099 net-snmp Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...