Fedora 19 : net-snmp-5.7.2-15.fc19 (2014-10099)

Update package fixes following bugs : - CVE-2014-3565 net-snmp: snmptrapd crash when handling an SNMP trap containing a ifMtu with a NULL type - net-snmp-cert now works without net-snmp-devel package installed Note that Tenable Network Security has extracted the preceding description block direct...

openSUSE Security Update : net-snmp (openSUSE-SU-2014:1108-1)

net-snmp was updated to fix a remote denial of service problem inside snmptrapd when started with the '-OQ' option CVE-2014-3565bnc894361 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Fedora Update for net-snmp FEDORA-2014-10099

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: net-snmp-5.7.2-15.fc19

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

Fedora 20 : net-snmp-5.7.2-18.fc20 (2014-10095)

Update package fixes following bugs : - CVE-2014-3565 net-snmp: snmptrapd crash when handling an SNMP trap containing a ifMtu with a NULL type - net-snmp-cert now works without net-snmp-devel package installed Note that Tenable Network Security has extracted the preceding description block direct...

Fedora Update for net-snmp FEDORA-2014-10095

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.3 Security Update : net-snmp (SAT Patch Number 9679)

This update for net-snmp fixes a remote denial of service problem inside snmptrapd when it is started with the '-OQ' option. CVE-2014-3565, bnc894361 Additionally, a timeout issue during SNMP MIB walk on OID 1.3.6.1.2.1.4.24 when using newer v5.5+ versions of snmpwalk has been fixed. bnc865222...

[SECURITY] Fedora 20 Update: net-snmp-5.7.2-18.fc20

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

Arris DG950A Cable Modem Wifi Enumeration

This module will extract WEP keys and WPA preshared keys from Arris DG950A cable modems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Arris DG950A Cable Modem Wifi Enumeration', 'Description...

CVE-2014-4862

The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obtain sensitive credential, key, and SSID information via an SNMP request...

CVE-2014-4863

The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request...

Design/Logic Flaw

The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request...

Design/Logic Flaw

The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obtain sensitive credential, key, and SSID information via an SNMP request...

CVE-2014-4863

The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request...

CVE-2014-4862

CVE-2014-4862 affects Netmaster CBW700N modems; CVE-2014-4863 affects Arris Touchstone DG950A modems. Both involve SNMP public community leaking sensitive data (passwords, keys, SSIDs) via SNMP requests. Publicly available details confirm exposure of credentials and wireless keys; DG950A document...

CVE-2014-4862

The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obtain sensitive credential, key, and SSID information via an SNMP request...

CVE-2014-4863

CVE-2014-4863 affects the Arris Touchstone DG950A cable modem (software 7.10.131). Public SNMP community access (SNMP community: public) enables reading sensitive information, including passwords, keys, and SSIDs, via SNMP requests. Connected documents corroborate: a Metasploit auxiliary module t...

MGASA-2014-0371 Updated net-snmp packages fix CVE-2014-3565

Updated net-snmp packages fix security vulnerabilities: A remote denial-of-service flaw was found in the way snmptrapd handled certain SNMP traps when started with the "-OQ" option. If an attacker sent an SNMP trap containing a variable with a NULL type where an integer variable type was expected...

Updated net-snmp packages fix CVE-2014-3565

Updated net-snmp packages fix security vulnerabilities: A remote denial-of-service flaw was found in the way snmptrapd handled certain SNMP traps when started with the "-OQ" option. If an attacker sent an SNMP trap containing a variable with a NULL type where an integer variable type was expected...

Some Cable Modems Found to Leak Sensitive Data Via SNMP

Cable modems sold by two manufacturers expose a wide variety of sensitive information over SNMP, including usernames and passwords, WEP keys and SSIDs. Researchers who discovered the vulnerabilities say they’re trivially exploitable and plan to release Metasploit modules for them later this month...