Update Protection against Net-SNMP Denial of Service

Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3. Net-SNMP is available for many Unix and Unix-like operating systems and also for Microsoft Windows. Net-SNMP is vulnerable to a denial of service that can be triggerred by sending a specially-crafted SNMP GETBULK...

Gentoo Security Advisory GLSA 200901-15 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200901-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200901-15 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200901-15. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

SuSE 10 Security Update : net-snmp (ZYPP Patch Number 5807)

Remote attackers could crash net-snmp via GETBULK-Request. CVE-2008-4309 In addition the following non-security issues have been fixed : - typo in error message. bnc439857 - fix duplicate registration warnings on startup. bnc326957 - container insert errors reproducable with shared ip setups...

SuSE Update for net-snmp SUSE-SA:2008:039

Check for the Version of net-snmp OpenVAS Vulnerability Test $Id: gbsuse2008039.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for net-snmp SUSE-SA:2008:039 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

GLSA-200901-15 : Net-SNMP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200901-15 Net-SNMP: Denial of Service Oscar Mira-Sanchez reported an integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c when processing GETBULK requests. Impact : A remote attacker could send a special...

Net-SNMP: Denial of service

Background Net-SNMP is a collection of tools for generating and retrieving SNMP data. Description Oscar Mira-Sanchez reported an integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c when processing GETBULK requests. Impact A remote attacker could send a specially crafte...

USN-685-1: Net-SNMP vulnerabilities

Wes Hardaker discovered that the SNMP service did not correctly validate HMAC authentication requests. An unauthenticated remote attacker could send specially crafted SNMPv3 traffic with a valid username and gain access to the user's views without a valid authentication passphrase. CVE-2008-0960...

openSUSE 10 Security Update : libsnmp15 (libsnmp15-5808)

Remote attackers could crash net-snmp via GETBULK-Request CVE-2008-4309. In addition the following non-security issues have been fixed : - typo in error message bnc439857 - fix duplicate registration warnings on startup bnc326957 - container insert errors reproducable with shared ip setups...

[SECURITY] Fedora 10 Update: net-snmp-5.4.2.1-1.fc10

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

FreeBSD Ports: net-snmp

The remote host is missing an update to the system as announced in the referenced advisory. VID daf045d7-b211-11dd-a987-000c29ca8953 OpenVAS Vulnerability Test $ Description: Auto generated from VID daf045d7-b211-11dd-a987-000c29ca8953 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1663-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: net-snmp

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Slackware 12.0 / 12.1 / current : net-snmp (SSA:2008-320-02)

New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix a denial of service issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-320-02. The text itself is...

[slackware-security] net-snmp

New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix a denial of service issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-4309 Here are the details from the Slackware 12.1...

Castle Rock Computing SNMPc < 7.1.1 (Community) Remote BOF PoC

No description provided by source. !usr/bin/perl -w Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet. Refer:...

Net-SNMP <= 5.1.4/5.2.4/5.4.1 Perl Module Buffer Overflow PoC

No description provided by source. !usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large OCTETSTRING in a...

Net-SNMP 5.1.45.2.45.4.1 Perl Module - Buffer Overflow (PoC)

Net-SNMP 5.1.45.2.45.4.1 Perl Module - Buffer Overflow PoC !usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via ...

netsnmp-overflow.txt

!usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair AVP. Refer:...

Net-SNMP <= 5.1.4/5.2.4/5.4.1 Perl Module Buffer Overflow PoC

Exploit for linux platform in category dos / poc ============================================================= Net-SNMP = 5.1.4/5.2.4/5.4.1 Perl Module Buffer Overflow PoC ============================================================= !usr/bin/perl -w Buffer overflow in the snprintvalue function i...