HP-UX PHSS_27222 : HP-UX, HP Jetdirect, HP Procurve Switches, HP OpenView Network Node Manager (NNM), OpenView Distributed Management (DM), HP TopTools Remote Control Card Running SNMP, Remote Unauthorized Access, Denial of Service (DoS) (HPSBUX00184 SSRT071347 rev.17)

s700800 11.00 OV NNM6.0x pmd/ovtrapd fixes : Vulnerabilities in SNMP request and trap handling. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS27222. The text itself is copyright C Hewlett-Packard...

Linux Kernel < 2.6.16.18 - Netfilter NAT SNMP Module Remote Denial of Service

/ ecl-nf-snmpwn.c - 30/05/06 Alex Behar Yuri Gushin A patch review we did on the 2.6.16.17-18 Linux kernel source tree revealed a restructuring of code in the snmpparsemangle and the snmptrapdecode functions. After further research it turned out to be a vulnerability previously reported1 and...

Linux Kernel < 2.6.16.18 (Netfilter NAT SNMP Module) Remote DoS Exploit

Exploit for linux platform in category dos / poc ======================================================================= Linux Kernel Yuri Gushin A patch review we did on the 2.6.16.17-18 Linux kernel source tree revealed a restructuring of code in the snmpparsemangle and the snmptrapdecode...

Linux Kernel 2.6.16.18 - Netfilter NAT SNMP Module Remote Denial of Service

Linux Kernel 2.6.16.18 - Netfilter NAT SNMP Module Remote Denial of Service / ecl-nf-snmpwn.c - 30/05/06 Alex Behar Yuri Gushin A patch review we did on the 2.6.16.17-18 Linux kernel source tree revealed a restructuring of code in the snmpparsemangle and the snmptrapdecode functions. After furthe...

CVE-2006-2444

The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...

CVE-2006-2444

The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...

CVE-2006-2444

CVE-2006-2444 affects the Linux kernel SNMP NAT Netfilter processing. The vulnerability in snmp_trap_decode (kernel = 2.6.16.18) or applying vendor patches where applicable. No additional exploitation details are provided in the documents.

CVE-2006-2444

The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...

Mandrake Linux Security Advisory : net-snmp (MDKSA-2006:025)

The fixproc application in Net-SNMP creates temporary files with predictable file names which could allow a malicious local attacker to change the contents of the temporary file by exploiting a race condition, which could possibly lead to the execution of arbitrary code. As well, a local attacker...

[Full-disclosure] [ MDKSA-2006:025 ] - Updated net-snmp packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:025 http://www.mandriva.com/security/ Package : net-snmp Date : January 26, 2006 Affected: 10.1, 10.2, Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The fixproc application in Net-SNMP creat...

net-snmp SNMP package fixproc utility symbolic link problem

Symbolic links problem on temporary files creation...

CVE-2006-0250

Format string vulnerability in the snmpinput function in snmptrapd in CMU SNMP utilities cmu-snmp allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162...

CVE-2006-0250

CVE-2006-0250 affects the CMU SNMP utilities (cmu-snmp), specifically the snmptrapd component’s snmp_input function. The root cause is a format string vulnerability that enables remote code execution by sending crafted SNMP messages to UDP port 162. Several connected sources confirm the vulnerabl...

Format string

Format string vulnerability in the snmpinput function in snmptrapd in CMU SNMP utilities cmu-snmp allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162...

PT-2006-1325 · Cmu · Cmu-Snmp

Name of the Vulnerable Software and Affected Versions: CMU SNMP utilities cmu-snmp affected versions not specified Description: The issue is related to a format string vulnerability in the snmp input function in snmptrapd. This vulnerability allows remote attackers to execute arbitrary code by...

CMU SNMP snmptrapd format string vulnerability

Format string vulnerability in snmpinput function...

Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability

CMU SNMP utilities snmptrad Format String Vulnerability Digital Armaments advisory is 01.04.2006 http://www.digitalarmaments.com/2006040164883273.html I. Background The package is CMU-SNMP utilities. In this package snmptrapd is an SNMP application that receives and logs SNMP TRAP and INFORM...

Ubuntu 4.10 / 5.04 : linux-source-2.6.8.1, linux-source-2.6.10 vulnerabilities (USN-169-1)

David Howells discovered a local Denial of Service vulnerability in the key session joining function. Under certain user-triggerable conditions, a semaphore was not released properly, which caused processes which also attempted to join a key session to hang forever. This only affects Ubuntu 5.04...

Ubuntu 4.10 : squid vulnerabilities (USN-19-1)

Recently, two Denial of Service vulnerabilities have been discovered in squid, a WWW proxy cache. Insufficient input validation in the NTLM authentication handler allowed a remote attacker to crash the service by sending a specially crafted NTLMSSP packet. Likewise, due to an insufficient...

Ubuntu 4.10 / 5.04 : net-snmp vulnerability (USN-190-1)

A remote Denial of Service has been discovered in the SMNP Simple Network Management Protocol library. If a SNMP agent uses TCP sockets for communication, a malicious SNMP server could exploit this to crash the agent. Please note that by default SNMP uses UDP sockets. Note that Tenable Network...