Aruba Networks ArubaOS SNMP公共串信息泄漏漏洞

BUGTRAQ ID: 32102 CNCAN ID：CNCAN-2008110501 Aruba Mobility Controller是一款为企业提供移动接入的解决方案。 Aruba Mobility Controller SNMP协议实现存在信息泄漏问题，远程攻击者可以利用漏洞获得敏感信息对设备进行攻击。 Aruba Mobility Controller可通过SNMP协议监视。存在只要公共串的其中之一个给攻击者知晓的情况下，可获得所有配置的SNMP公告串。这可通过OID分支SNMP-COMMUNITY-MIB::snmpCommunityName...

Fedora 9 : net-snmp-5.4.1-19.fc9 (2008-9367)

Tue Jul 22 2008 Jan Safranek 5.4.1-19 - fix perl SNMP::Session::set 452131 - support interface names longer than 8 characters 468045 - explicitly require the right version and release of net-snmp and net-snmp-libs - fix CVE-2008-4309 - Tue Jun 10 2008 Jan Safranek 5.4.1-18 - explicitly require...

Fedora 8 : net-snmp-5.4.1-8.fc8 (2008-9362)

Mon Jun 23 2008 Jan Safranek 5.4.1-8 - explicitly require the right version and release of net-snmp and net-snmp-libs 451225 - fix CVE-2008-4309 - Tue Jun 10 2008 Jan Safranek 5.4.1-7 - fix various flaws CVE-2008-2292 CVE-2008-0960 - Thu Feb 14 2008 Jan Safranek 5.4.1-6 - fixing...

Net-SNMP GETBULK请求整数溢出拒绝服务漏洞

CVECAN ID: CVE-2008-4309 Net-SNMP是一个免费的、开放源码的SNMP实现，以前称为UCD-SNMP。 Net-SNMP的实现上存在漏洞，远程攻击者可能利用此漏洞导致服务器拒绝服务。问题存在于agent/snmpagent.c文件的netsnmpcreatesubtreecache函数中，精心构造的畸形的SNMP GETBULK请求会导致函数发生整数溢出，在后续的处理中导致服务进程崩溃。 0 Net-SNMP net-snmp 5.4.x 5.4.2.1 Net-SNMP net-snmp 5.3.x 5.3.2.3 Net-SNMP net-snmp 5.2...

RHEL 3 / 4 / 5 : net-snmp (RHSA-2008:0971)

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP is a protocol used for network...

net security update

CentOS Errata and Security Advisory CESA-2008:0971 Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Simple Network Management...

Important: Red Hat Security Advisory: net-snmp security update

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP is a protocol used for network...

net-snmp: numresponses calculation integer overflow in snmp_agent.c

Integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service crash via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,...

net-snmp security update

5.3.1-24.2 - fix crash in bulk request processing 469373...

CVE-2008-4309

Integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service crash via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,...

CVE-2008-4309

Integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service crash via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,...

DEBIAN-CVE-2008-4309

Integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service crash via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,...

CVE-2008-4309

Integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service crash via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,...

Integer overflow

Integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service crash via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,...

CVE-2008-4309

Net-SNMP vulnerability CVE-2008-4309: an integer overflow in netsnmp_create_subtree_cache() in agent/snmp_agent.c allows remote DoS via crafted SNMP GETBULK requests, causing a heap-based overflow and crash. Affected are net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1. Mit...

CVE-2008-4309

Integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service crash via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,...

CVE-2008-4309

Integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service crash via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,...

Updated ESX packages for libxml2, ucd-snmp, libtiff

a. Updated ESX Service Console package libxml2A denial of service flaw was found in the way libxml2 processescertain content. If an application that is linked againstlibxml2 processes malformed XML content, the XML content mightcause the application to stop responding.The Common Vulnerabilities a...

VMSA-2008-0017:Updated ESX packages for libxml2, ucd-snmp, libtiff

VMSA-2008-0017.2 Updated ESX packages for libxml2, ucd-snmp, libtiff VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2008-0017.2 VMware Security Advisory Synopsis: Updated ESX packages for libxml2, ucd-snmp, libtiff VMware Security Advisory Issue date: 2008-10-31 VMware Securi...

Secunia Research: HP SiteScope SNMP Trap Script Insertion Vulnerability

====================================================================== Secunia Research 20/10/2008 - HP SiteScope SNMP Trap Script Insertion - ====================================================================== Table of Contents Affected...