net-snmp:snmp_api_fuzzer: Crash in snmp_add_var

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5402726234718208 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpapifuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

PT-2021-27720

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash type has been identified. The crash state involves the snmp add var function, as indicated by the snmp api fuzzer.c...

net-snmp:snmp_api_fuzzer: Heap-buffer-overflow in snmp_add_var

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6017372729769984 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpapifuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in get_token

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5855065276547072 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpmibfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Stack-buffer-overfl...

net-snmp:snmp_parse_oid_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5385602735407104 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpparseoidfuzzer Job Type: libfuzzerubsannet-snmp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000003b3e35 Crash State: NULL Sanitizer: undefined UBSAN...

CVE-2020-25565

In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients username: sapphire, password: ims and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “snmp” functions and execute code on the server...

CVE-2020-25560

In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients username: sapphire, password: ims and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “snmp” functions and execute code on the server. W...

PT-2021-11152

Name of the Vulnerable Software and Affected Versions: SapphireIMS version 5.0 Description: The issue allows an attacker to use hardcoded credentials in clients, with the username: sapphire and password: ims, to gain access to the portal. Once access is obtained, the attacker can inject malicious...

CVE-2020-25565: Use of Hard-coded Credentials

In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients username: sapphire, password: ims and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “snmp” functions and execute code on the server...

Tecknodreams SapphireIMS 信任管理问题漏洞

Tecknodreams SapphireIMS is an ITIL 2011 certified enterprise-class service management system from Tecknodreams India.A trust management issue vulnerability exists in SapphireIMS 5.0, which stems from the fact that in SapphireIMS 5.0, it is possible to use hard-coded credentials in the client...

PT-2021-11147

Name of the Vulnerable Software and Affected Versions: SapphireIMS version 5.0 Description: The issue allows an attacker to use hardcoded credentials in clients, with the username: sapphire and password: ims, to gain access to the portal. Once access is obtained, the attacker can inject malicious...

Cisco Firepower Threat Defense Software SNMP DoS (cisco-sa-ftd-snmp-dos-R8ENPbOs)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in the Simple Network Management Protocol SNMP input packet processor that could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly. The...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in getoid

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4817499223883776 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpmibfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

PT-2021-27691

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurred in the read config function, as indicated by the snmp...

net-snmp:snmp_config_fuzzer: Heap-buffer-overflow in read_config

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5986401836466176 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpconfigfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_octet_fuzzer: Crash in node_to_oid

Detailed Report: https://oss-fuzz.com/testcase?key=6012171950620672 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpoctetfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x61900066dcf8 Crash State: nodetooid getmodulenode getnode...

net-snmp:snmp_octet_fuzzer: Heap-buffer-overflow in _add_strings_to_oid

Detailed Report: https://oss-fuzz.com/testcase?key=4632511249514496 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpoctetfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6150000a9302 Crash State: addstringstooid readobjid...

Security Bulletin: IBM Security Privileged Identity Manager vulnerable to local command execution vulnerability (CVE-2020-15862)

Summary IBM Security Privileged Identity Manager has addressed the following vulnerability in net-SNMP component used. Vulnerability Details CVEID: CVE-2020-15862 DESCRIPTION: Net-SNMP could allow a local authenticated attacker to gain elevated privileges on the system, caused by an improper...

Epson Printer Detection (SNMP)

SNMP based detection of Epson printer devices. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

EulerOS Virtualization 3.0.2.2 : net-snmp (EulerOS-SA-2021-2149)

According to the version of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE:...