Net-SNMP multiple security vulnerabilities

Multiple DoS conditions...

[USN-2166-1] Net-SNMP vulnerabilities

========================================================================== Ubuntu Security Notice USN-2166-1 April 14, 2014 net-snmp vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

CVE-2014-3139

recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by setting the auth parameter to a certain string...

CVE-2014-2285

The perltrapdhandler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service snmptrapd crash via an empty community string in an SNMP trap, which triggers a NULL pointer dereference...

CVE-2014-2285

The perltrapdhandler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service snmptrapd crash via an empty community string in an SNMP trap, which triggers a NULL pointer dereference...

Null pointer dereference

The perltrapdhandler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service snmptrapd crash via an empty community string in an SNMP trap, which triggers a NULL pointer dereference...

CVE-2014-2285

CVE-2014-2285 affects Net-SNMP 5.7.3.pre3 and earlier: the perl_trapd_handler in TrapReceiver.xs can allow a remote attacker to cause a denial of service (snmptrapd crash) by sending a trap with an empty community string, triggering a NULL pointer dereference in Perl. Connected advisories indicat...

CVE-2014-2285

The perltrapdhandler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service snmptrapd crash via an empty community string in an SNMP trap, which triggers a NULL pointer dereference...

CVE-2014-2285

The perltrapdhandler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service snmptrapd crash via an empty community string in an SNMP trap, which triggers a NULL pointer dereference...

CVE-2014-2310

The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service hang by sending a multi-object request with an Object ID OID containing more subids than previous requests, a different vulnerability than CVE-2012-6151...

CVE-2014-2310

The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service hang by sending a multi-object request with an Object ID OID containing more subids than previous requests, a different vulnerability than CVE-2012-6151...

Design/Logic Flaw

The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service hang by sending a multi-object request with an Object ID OID containing more subids than previous requests, a different vulnerability than CVE-2012-6151...

CVE-2014-2310

The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service hang by sending a multi-object request with an Object ID OID containing more subids than previous requests, a different vulnerability than CVE-2012-6151...

CVE-2014-2310

The CVE-2014-2310 vulnerability concerns Net-SNMP’s AgentX subagent. It affects the AgentX subagent in Net-SNMP versions before 5.4.4 where processing a multi-object GET/GETNEXT request with an OID that contains more subidentifiers than prior requests can cause the snmpd process to hang, resultin...

CVE-2014-2310

The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service hang by sending a multi-object request with an Object ID OID containing more subids than previous requests, a different vulnerability than CVE-2012-6151...

[SECURITY] Fedora 20 Update: cacti-0.8.8b-5.fc20

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

[SECURITY] Fedora 19 Update: cacti-0.8.8b-5.fc19

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

FreeBSD SNMP getBulkRequest bsnmpd Stack Buffer Overflow - Ver2 (CVE-2014-1452)

A buffer overflow vulnerability has been reported in FreeBSD SNMP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Unitrends Enterprise Backup 7.3.0 - Root Remote Code Execution (Metasploit)

Unitrends Enterprise Backup 7.3.0 - Root Remote Code Execution Metasploit Unitrends Enterprise Backup 7.3.0 Multiple vulnerabilities exist within this piece of software. The largest one is likely the fact that the ‘auth’ string used for authorization isn’t random at all. After authentication, any...

Ubuntu Update for net-snmp USN-2166-1

Check for the Version of net-snmp OpenVAS Vulnerability Test $Id: gbubuntuUSN21661.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for net-snmp USN-2166-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...