FreeBSD : net-snmp -- DoS for SNMP agent via crafted GETBULK request (daf045d7-b211-11dd-a987-000c29ca8953)

Wes Hardaker reports through sourceforge.net forum : SECURITY ISSUE: A bug in the getbulk handling code could let anyone with even minimal access crash the agent. If you have open access to your snmp agents bad bad bad; stop doing that! or if you don't trust everyone that does have access to your...

Castle Rock Computing SNMPc < 7.1.1 (Community) Remote BOF PoC

No description provided by source. !usr/bin/perl -w Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet. Refer:...

Net-SNMP <= 5.1.4/5.2.4/5.4.1 Perl Module Buffer Overflow PoC

No description provided by source. !usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large OCTETSTRING in a...

netsnmp-overflow.txt

!usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair AVP. Refer:...

Net-SNMP 5.1.45.2.45.4.1 Perl Module - Buffer Overflow (PoC)

Net-SNMP 5.1.45.2.45.4.1 Perl Module - Buffer Overflow PoC !usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via ...

Net-SNMP <= 5.1.4/5.2.4/5.4.1 Perl Module Buffer Overflow PoC

Exploit for linux platform in category dos / poc ============================================================= Net-SNMP = 5.1.4/5.2.4/5.4.1 Perl Module Buffer Overflow PoC ============================================================= !usr/bin/perl -w Buffer overflow in the snprintvalue function i...

castlerock-overflow.txt

!usr/bin/perl -w Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet. Refer:...

Castle Rock Computing SNMPc 7.1.1 - Community Remote Buffer Overflow (PoC)

Castle Rock Computing SNMPc 7.1.1 - Community Remote Buffer Overflow PoC !usr/bin/perl -w Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community...

Net-SNMP 5.1.4/5.2.4/5.4.1 Perl Module - Buffer Overflow (PoC)

!usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair AVP. Refer:...

Castle Rock Computing SNMPc < 7.1.1 (Community) Remote BOF PoC

Exploit for unknown platform in category dos / poc ============================================================== Castle Rock Computing SNMPc 7.1.1 Community Remote BOF PoC ============================================================== !usr/bin/perl -w Stack-based buffer overflow in the Network...

Castle Rock Computing SNMPc <= 7.0.19 - Community String Stack Based Buffer Overflow Vulnerability

Castle Rock Computing SNMPc 7.0.19 Community String Stack Based Buffer Overflow Vulnerability. CVE-2008-2214. Remote exploits for multiple platform source: http://www.securityfocus.com/bid/28990/info Castle Rock Computing SNMPc is prone to a stack-based buffer-overflow vulnerability because it...

Aruba Mobility Controller informaton leakage

Knowing any SNMP community with read access it's possible to learn any SNMP community...

[SECURITY] [DSA 1663-1] New net-snmp packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1663-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 09, 2008 http://www.debian.org/security/faq -...

Aruba Mobility Controller SNMP Community String Disclosure

Aruba Mobility Controller SNMP Community String Disclosure Product: Aruba Mobility Controller http://www.arubanetworks.com/products/mobilitycontrollers.php Aruba mobility controller can be monitored via SNMP. It is possible to learn all configured SNMP community strings as long as at least one of...

[SECURITY] [DSA 1663-1] New net-snmp packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1663-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 09, 2008 http://www.debian.org/security/faq -...

Debian DSA-1663-1 : net-snmp - several vulnerabilities

Several vulnerabilities have been discovered in NET SNMP, a suite of Simple Network Management Protocol applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0960 Wes Hardaker reported that the SNMPv3 HMAC verification relies on the client t...

DSA-1663-1 net-snmp - several vulnerabilities

Bulletin has no description...

[SECURITY] Fedora 9 Update: net-snmp-5.4.1-19.fc9

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

[SECURITY] Fedora 8 Update: net-snmp-5.4.1-8.fc8

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

snmp-sysdescr NSE Script

Attempts to extract system information from an SNMP service. Script Arguments snmp.version See the documentation for the snmp library. creds.service, creds.global See the documentation for the creds library. Example Usage nmap -sU -p 161 --script snmp-sysdescr Script Output | snmp-sysdescr: HP...