CVE-2009-1887

agent/snmpagent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux RHEL 3 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309...

CVE-2009-1887

agent/snmpagent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux RHEL 3 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309...

CVE-2009-1887

CVE-2009-1887 affects NET-SNMP’s snmpd (agent/snmp_agent.c). A remote attacker can trigger a divide-by-zero via a crafted SNMP GETBULK request, causing a denial of service (daemon crash). The root cause is an integer/subtree cache handling flaw in netsnmp_create_subtree_cache in agent/snmp_agent....

CVE-2009-1887

agent/snmpagent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux RHEL 3 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309...

CentOS 3 : net-snmp (CESA-2009:1124)

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP is a protocol used for network management. A...

RHEL 3 : net-snmp (RHSA-2009:1124)

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP is a protocol used for network management. A...

net security update

CentOS Errata and Security Advisory CESA-2009:1124 Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP...

net-snmp: DoS (division by zero) via SNMP GetBulk requests

agent/snmpagent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux RHEL 3 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309...

Moderate: Red Hat Security Advisory: net-snmp security update

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP is a protocol used for network management. A...

net-snmp security update

5.0.9-2.30E.28 - fix another crash in bulk request processing 469369...

openSUSE 10 Security Update : libsnmp15 (libsnmp15-6247)

With this update of net-snmp the handling of TCP wrappers rules for client authorization was improved, prior to this update it was possible for remote attackers to bypass intended access restrictions and execute SNMP queries. CVE-2008-6123 Additionally binding to multiple interfaces was improved...

Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.7. Mac OS X 10.5.7 contains security fixes for the following products : - Apache - ATS - BIND - CFNetwork - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - iChat -...

Mac OS X Multiple Vulnerabilities (Security Update 2009-002)

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2009-002 applied. This security update contains fixes for the following products : - Apache - ATS - BIND - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - IPSec -...

CVE-2008-6123

The netsnmpudpfmtaddr function snmplib/snmpUDPDomain.c in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to...

CentOS 3 / 4 / 5 : net-snmp (CESA-2008:0971)

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP is a protocol used for network...

Fedora 10 : net-snmp-5.4.2.1-1.fc10 (2008-10451)

Mon Nov 3 2008 Jan Safranek 5.4.2.1-1 - explicitly require the right version and release of net-snmp and net-snmp-libs - update to net-snmp-5.4.2.1 to fix CVE-2008-4309 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : net-snmp vulnerabilities (USN-685-1)

Wes Hardaker discovered that the SNMP service did not correctly validate HMAC authentication requests. An unauthenticated remote attacker could send specially crafted SNMPv3 traffic with a valid username and gain access to the user's views without a valid authentication passphrase. CVE-2008-0960...

CentOS 3 / 4 : net-snmp (CESA-2007:1045)

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. Simple Network Management Protocol SNMP is a protocol used for network management. A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect ...

Fedora 10 : net-snmp-5.4.2.1-3.fc10 (2009-1769)

Mon Feb 16 2009 Jan Safranek 5.4.2.1-3 - fix tcpwrappers integration CVE-2008-6123 - Mon Dec 1 2008 Jan Safranek 5.4.2.1-2 - rebuild for fixed rpm 473420 - Mon Nov 3 2008 Jan Safranek 5.4.2.1-1 - explicitly require the right version and release of net-snmp and net-snmp-libs - update to...

Mandriva Linux Security Advisory : net-snmp (MDVSA-2008:118)

A vulnerability was found in how Net-SNMP checked an SNMPv3 packet's Keyed-Hash Message Authentication Code HMAC. An attacker could exploit this flaw to spoof an authenticated SNMPv3 packet CVE-2008-0960. A buffer overflow was found in the perl bindings for Net-SNMP that could be exploited if an...