Low: Red Hat Security Advisory: net-snmp security update

Updated net-snmp packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used for network management. A denial of service bug was...

security flaw

snmpapi.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service crash by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different...

CVE-2005-2548

vlandev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service kernel oops from null dereference via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd...

CVE-2005-2548

vlandev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service kernel oops from null dereference via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd...

CVE-2005-2548: Undefined Security Weakness

vlandev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service kernel oops from null dereference via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd...

CVE-2004-2300

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this...

CVE-2004-2300

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this...

CVE-2004-2300: Undefined Security Weakness

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this...

CVE-2004-2300

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this...

Debian DSA-111-1 : ucd-snmp - remote exploit

The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploits. New UCD-SNMP packages have been prepared to fix these problems as well as a few others. The...

Net-SNMPd Write Access SNMP-EXTEND-MIB arbitrary code execution

This exploit module exploits the SNMP write access configuration ability of SNMP-EXTEND-MIB to configure MIB extensions and lead to remote code execution. Module Options msf use exploit/linux/snmp/net/snmpdrwaccess msf undefinedsnmpdrwaccess show actions ...actions... msf undefinedsnmpdrwaccess s...

CVE-2002-0017: Undefined Security Weakness

Buffer overflow in SNMP daemon snmpd on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request...

IRIX SNMP Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: SNMP Vulnerabilities Number: 20020201-01-P Date: April 3, 2002 Reference: CERT CA-2002-03 Reference: CVE CAN-2002-0013 Reference: CVE CAN-2002-0017 SGI provides this information freely to the SGI user community for its consideration,...

CVE-1999-1335

CVE-1999-1335 concerns the cmu-snmp package’s snmpd server on Red Hat Linux 4.0 prior to 3.3-1. The vulnerability arises because snmpd is configured to allow remote attackers to read and write sensitive information. Affected product: cmu-snmp snmpd; vulnerable version before 3.3-1. Remediation pe...

CVE-2001-0487

CVE-2001-0487 affects the AIX SNMP server (snmpd) and allows remote attackers to cause a denial of service by sending a RST during the TCP connection. The provided documents do not specify the exact vulnerable component version range, affected product family beyond “AIX SNMP server snmpd,” or any...

CVE-2001-0998: Undefined Security Weakness

IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports e.g., using a port scan that does not send additional data, which causes a failure in snmpd...

CVE-2001-0487: Undefined Security Weakness

AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection...

CVE-1999-1335: Undefined Security Weakness

snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information...

CVE-2001-0998

IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports e.g., using a port scan that does not send additional data, which causes a failure in snmpd...

CVE-2001-0470: Undefined Security Weakness

Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name...