SuSE9 Security Update : net-snmp (YOU Patch Number 12298)

Remote attackers could crash net-snmp via GETBULK-Request. CVE-2008-4309 In addition the following non-security issues have been fixed : - typo in error message bnc439857 - make OIDs longer than 256 chars work bnc345914 - typo in the snmpd init script to really load all agents bnc415127 - logrota...

SuSE9 Security Update : net-snmp (YOU Patch Number 12022)

This update of net-snmp fixes the following bugs : - Default and configurable maximum number of varbinds returnable to a GETBULK request. CVE-2007-5846 - Add option to ignore accepted connections. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell...

SuSE 10 Security Update : net-snmp (ZYPP Patch Number 6248)

With this update of net-snmp the handling of TCP wrappers rules for client authorization was improved, prior to this update it was possible for remote attackers to bypass intended access restrictions and execute SNMP queries. CVE-2008-6123 Additionally binding to multiple interfaces was improved...

SuSE9 Security Update : net-snmp (YOU Patch Number 12204)

This security update of net-snmp fixes a denial of service vulnerability CVE-2008-2292, an authentication bypass CVE-2008-0960 and several memory leaks. In addition net-snmp was patched to allow customization of the agent address set. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

cman security, bug fix, and enhancement update

2.0.115-1 - RSA II fencing agent has been fixed. - Resolves: rhbz493802 2.0.114-1 - local variable 'verbosefilename' referenced before assignment has been fixed - RSA II fencing agent has been fixed. - Resolves: rhbz493802 rhbz514758 2.0.113-1 - Limitations with 2-node fencescsi are now properly...

Low: Red Hat Security Advisory: cman security, bug fix, and enhancement update

Updated cman packages that fix several security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The Cluster Manager cman utility provides services for...

Code injection

The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to 1 read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName 1.3.6.1.6.3.18.1.1.1.2 or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName 1.3.6.1.6.3.16.1.2.1.3 with...

CVE-2008-7095

The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to 1 read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName 1.3.6.1.6.3.18.1.1.1.2 or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName 1.3.6.1.6.3.16.1.2.1.3 with...

CVE-2008-7095

The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to 1 read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName 1.3.6.1.6.3.18.1.1.1.2 or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName 1.3.6.1.6.3.16.1.2.1.3 with...

CVE-2008-7095

The CVE-2008-7095 entry affects ArubaOS 3.3.2.6 on Aruba Mobility Controller, where the SNMP daemon does not restrict SNMP access. This allows remote attackers to read SNMP data: (1) all community strings via SNMP-COMMUNITY-MIB::snmpCommunityName or vacmGroupName via SNMP-VIEW-BASED-ACM-MIB with ...

CVE-2008-6976

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

Cross site request forgery (csrf)

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

CVE-2008-6976

Summary of CVE-2008-6976 : MikroTik RouterOS versions 3.x (3.0–3.13) and 2.x (2.0–2.9.51) are vulnerable to an improper input validation vulnerability in SNMP handling that allows remote attackers to modify Network Management System (NMS) settings via a crafted SNMP set request. This can enable u...

EUVD-2008-6935

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

CVE-2008-6976

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

SNMP Supported Protocols Detection

Extend the SNMP settings data already gathered by testing for\ SNMP versions other than the highest negotiated. TRUSTED...

Mandrake Security Advisory MDVSA-2009:156 (net-snmp)

The remote host is missing an update to net-snmp announced via advisory MDVSA-2009:156. OpenVAS Vulnerability Test $Id: mdksa2009156.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:156 net-snmp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Mandrake Security Advisory MDVSA-2009:156 (net-snmp)

The remote host is missing an update to net-snmp announced via advisory MDVSA-2009:156. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

AIX SNMP Scanner Auxiliary Module

AIX SNMP Scanner Auxiliary Module This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'AIX SNMP Scanner Auxiliary Module', 'Description' = 'AIX SNMP Scanner Auxiliary Module', 'Author' = 'Ramon de C...

VMSA-2008-0007 : Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus

a. Updated pcre Service Console package addresses several security issues The pcre package contains the Perl-Compatible Regular Expression library. pcre is used by various Service Console utilities. Several security issues were discovered in the way PCRE handles regular expressions. If an...