openSUSE 10 Security Update : nagios-plugins (nagios-plugins-4621)

fix possible buffer overflow during HTTP Location header parsing in checkhttp CVE-2007-5198 fix possible buffer overflow during snmpget parsing in checksnmp CVE-2007-5623 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502 exit0; C Tenable...

GLSA-200711-31 : Net-SNMP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200711-31 Net-SNMP: Denial of Service The SNMP agent snmpd does not properly handle GETBULK requests with an overly large 'max-repetitions' field. Impact : A remote unauthenticated attacker could send a specially crafted SNMP...

Fedora 7 : net-snmp-5.4-16.fc7 (2007-3019)

Fri Oct 19 2007 Jan Safranek 5.4-16 - License: field fixed to 'BSD and CMU' - fix hrSWInst 250237 - fix leak in UDP transport 247771 - fix remote DoS attack CVE-2007-5846 - Mon Oct 8 2007 Jan Safranek 5.4-15 - License: field changed to MIT - fix segfault on parsing smuxpeer without password...

DTSA-88-1 net-snmp - denial of service

Bulletin has no description...

[SECURITY] Fedora 7 Update: cacti-0.8.7a-1.fc7

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

[SECURITY] Fedora 8 Update: cacti-0.8.7a-1.fc8

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

[SECURITY] Fedora 7 Update: net-snmp-5.4-16.fc7

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

Mandrake Linux Security Advisory : net-snmp (MDKSA-2007:225)

The SNMP agent in net-snmp 5.4.1 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value. Updated packages fix this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Net-SNMP: Denial of service

Background Net-SNMP is a collection of tools for generating and retrieving SNMP data. Description The SNMP agent snmpd does not properly handle GETBULK requests with an overly large "max-repetitions" field. Impact A remote unauthenticated attacker could send a specially crafted SNMP request to th...

net-snmp DoS

CPU resources exhaustion on GETBULK with large max-repeaters parameter value...

[ MDKSA-2007:225 ] - Updated net-snmp packages fix remote denial of service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:225 http://www.mandriva.com/security/ Package : net-snmp Date : November 19, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: The SNMP agent in...

RHEL 3 / 4 / 5 : net-snmp (RHSA-2007:1045)

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. Simple Network Management Protocol SNMP is a protocol used for network management. A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect ...

Moderate: net-snmp security update

5.0.9-2.30E.23 - fix bulkwalk security flaw 366591...

net security update

CentOS Errata and Security Advisory CESA-2007:1045 Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. Simple Network Management Protocol SNMP is a protocol used for network management. A flaw was discovered in the way net-snmp handled...

Moderate: Red Hat Security Advisory: net-snmp security update

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. Simple Network Management Protocol SNMP is a protocol used for network management. A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect ...

FreeBSD : net-snmp -- denial of service via GETBULK request (92f86b93-923f-11dc-a2bf-02e081235dab)

CVE reports : The SNMP agent snmpagent.c in net-snmp before 5.4.1 allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Ubuntu 6.06 LTS : net-snmp vulnerability (USN-456-1)

The SNMP service did not correctly handle TCP disconnects. Remote subagents could cause a denial of service if they dropped a connection at a specific time. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has...

Net-SNMP GETBULK远程拒绝服务漏洞

BUGTRAQ ID: 26378 CVECAN ID: CVE-2007-5846 Net-SNMP是一个免费的、开放源码的SNMP实现，以前称为UCD-SNMP。 Net-SNMP在处理畸形的SNMP GETBULK请求时存在漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 Net-SNMP没有正确地处理SNMP GETBULK请求，如果远程攻击者发送了包含有超长max-repetitions字段的畸形SNMP GETBULK请求的话，就可能导致耗尽大量CPU和内存资源。 0 Net-SNMP net-snmp 5.4.1...

SNMP GETBULK Large max-repetitions Remote DoS

It is possible to disable the remote SNMP daemon by sending a GETBULK request with a large value for 'max-repetitions'. A remote attacker may be able to leverage this issue to cause the daemon to consume excessive memory and CPU on the affected system while it tries unsuccessfully to process the...

GLSA-200711-11 : Nagios Plugins: Two buffer overflows

The remote host is affected by the vulnerability described in GLSA-200711-11 Nagios Plugins: Two buffer overflows fabiodds reported a boundary checking error in the 'checksnmp' plugin when processing SNMP 'GET' replies that could lead to a stack-based buffer overflow CVE-2007-5623. Nobuhiro Ban...