GLSA-200808-02 : Net-SNMP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200808-02 Net-SNMP: Multiple vulnerabilities Wes Hardaker reported that the SNMPv3 HMAC verification relies on the client to specify the HMAC length CVE-2008-0960. John Kortink reported a buffer overflow in the Perl bindings of...

Net-SNMP: Multiple vulnerabilities

Background Net-SNMP is a collection of tools for generating and retrieving SNMP data. The SNMPv3 protocol uses a keyed-Hash Message Authentication Code HMAC to verify data integrity and authenticity of SNMP messages. Description Wes Hardaker reported that the SNMPv3 HMAC verification relies on th...

openSUSE 10 Security Update : libsnmp15 (libsnmp15-5418)

This security update fixes a denial of service vulnerability and an authentication bypass CVE-2008-2292, CVE-2008-0960. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsnmp15-5418. The text...

SuSE 10 Security Update : net-snmp (ZYPP Patch Number 5422)

This security update of net-snmp fixes a denial of service vulnerability CVE-2008-2292, an authentication bypass CVE-2008-0960 and several memory leaks. In addition net-snmp was patched to allow customization of the agent address set. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SOL9025 - FirePass SNMP DoS vulnerability

This SNMP vulnerability can at most cause DoS of the FirePass SNMP service and cannot cause either unprivileged access to the FirePass controller or DoS of other FirePass services. Information about this advisory is available at the following location: F5 Product Development tracked this issue a...

[slackware-security] net-snmp

New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-0960 https://vulners.com/cve/CVE-2008-2292 Here are the details...

Slackware 12.0 / 12.1 / current : net-snmp (SSA:2008-210-07)

New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-210-07. The text itself is copyright ...

Preemptive Protection againt Linux Kernel SNMP NAT Netfilter Memory Corruption Vulnerability

A denial of service vulnerability has been discovered in the Linux Kernel. Linux is a popular open-source operating system. The Linux kernel supports a packet filtering framework known as Netfilter. Netfilter is capable of processing various IP based protocols, including SNMP. A remote attacker m...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

Sun Solaris系统管理代理SNMP守护程序缓冲区溢出漏洞

BUGTRAQ ID: CVE ID：CVE-2008-2292 CNCVE ID：CNCVE-20082292 Sun Solaris是一款商业性质的Unix操作系统。 Sun Solaris系统管理代理SMASNMP守护程序存在缓冲区溢出，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击，或以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Sun Solaris 10 可参考如下安全公告获得补丁信息： http://sunsolve.sun.com/search/document.do?assetkey=1-66-239785-1...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

CVE-2008-3149

The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service daemon crash by walking the hrSWInstalled OID branch in HOST-RESOURCES-MIB...

Design/Logic Flaw

The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service daemon crash by walking the hrSWInstalled OID branch in HOST-RESOURCES-MIB...

CVE-2008-3149

The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service daemon crash by walking the hrSWInstalled OID branch in HOST-RESOURCES-MIB...

CVE-2008-3149

The CVE-2008-3149 entry affects the SNMP daemon in F5 FirePass 1200 (version 6.0.2 hotfix 3). The vulnerability arises from handling the HOST-RESOURCES-MIB hrSWInstalled OID branch, enabling remote attackers to cause a denial-of-service (daemon crash). Exploitation details, impacted versions beyo...

Stack overflow

Multiple stack-based buffer overflows in the ServerView web interface SnmpGetMibValues.exe in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL...

F5 FirePass SNMP DoS

Crash on 1.3.6.1.2.1.25.6 traversing...

F5 FirePass 1200 SNMP daemon DoS

F5 FirePass 1200 SNMP daemon DoS Product: F5 FirePass 1200 http://www.f5.com/products/firepass/ The F5 FirePass 1200 SSL VPN appliance contains a denial-of-service vulnerability in the SNMP daemon. Traversing walking OID branch hrSWInstalled in HOST-RESOURCES-MIB OID 1.3.6.1.2.1.25.6 will cause t...