[SECURITY] Fedora 20 Update: net-snmp-5.7.2-17.fc20

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

Fedora 20 : net-snmp-5.7.2-17.fc20 (2014-3427)

A denial of service attack vector was discovered on the Linux implementation of the ICMP-MIB. This release fixes this bug and all users are encouraged to update their SNMP agent if they make use of the ICMP-MIB table objects. Note that Tenable Network Security has extracted the preceding...

Fedora 19 : net-snmp-5.7.2-14.fc19 (2014-3423)

A denial of service attack vector was discovered on the Linux implementation of the ICMP-MIB. This release fixes this bug and all users are encouraged to update their SNMP agent if they make use of the ICMP-MIB table objects. Note that Tenable Network Security has extracted the preceding...

Report default community names of the SNMP Agent

Simple Network Management Protocol SNMP is a protocol which can be used by administrators to remotely manage a computer or network device. There are typically 2 modes of remote SNMP monitoring. These modes are roughly SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be...

Kernel: qeth: buffer overflow in snmp ioctl

Buffer overflow in the qethsnmpcommand function in drivers/s390/net/qethcoremain.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores...

Net-SNMP snmptrapd远程拒绝服务漏洞

Bugtraq ID:65968 Net-SNMP是一款开放源码的SNMP实现。 Net-snmp-perl存在安全漏洞，在启用Perl处理器的情况下，发送包含空公共串的SNMP trap可导致应用程序崩溃。 0 Net-snmp-perl 5.3.2.2 厂商补丁： Net-SNMP ----- 用户可参考如下厂商提供的安全补丁以修复该漏洞： http://sourceforge.net/p/net-snmp/patches/1275/...

CVE-2014-2310

The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service hang by sending a multi-object request with an Object ID OID containing more subids than previous requests, a different vulnerability than CVE-2012-6151...

MGASA-2014-0122 Updated net-snmp packages fix two vulnerabilities

Updated net-snmp packages fix security vulnerabilities: Remotely exploitable denial of service vulnerability in Net-SNMP, in the Linux implementation of the ICMP-MIB, making the SNMP agent vulnerable if it is making use of the ICMP-MIB table objects CVE-2014-2284. Remotely exploitable denial of...

Updated net-snmp packages fix two vulnerabilities

Updated net-snmp packages fix security vulnerabilities: Remotely exploitable denial of service vulnerability in Net-SNMP, in the Linux implementation of the ICMP-MIB, making the SNMP agent vulnerable if it is making use of the ICMP-MIB table objects CVE-2014-2284. Remotely exploitable denial of...

PT-2014-1816

Name of the Vulnerable Software and Affected Versions Net-SNMP versions 5.3.2.2 through 5.7.3.pre3 Net-SNMP version 5.3.2.2 Description The issue concerns multiple vulnerabilities in the Net-SNMP package, which can lead to a disruption of protected information availability. These vulnerabilities...

PT-2014-1861

Name of the Vulnerable Software and Affected Versions Net-SNMP versions 5.5 before 5.5.2.1 Net-SNMP versions 5.6.x before 5.6.2.1 Net-SNMP versions 5.7.x before 5.7.2.1 Description The Linux implementation of the ICMP-MIB in Net-SNMP does not properly validate input, which allows remote attackers...

ZTE ZXV10 W300 Wireless Router Hard-coded Password

Nessus was able to login to the remote device using a known hard-coded password prepended with a portion of the device's MAC address obtained from an SNMP request for the admin account. Attackers can exploit this vulnerability to gain full control of the device. TRUSTED...

CVE-2014-2285

The perltrapdhandler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service snmptrapd crash via an empty community string in an SNMP trap, which triggers a NULL pointer dereference...

Cisco IPS MainApp SNMP Denial of Service Vulnerability

A vulnerability in the SNMP code of Cisco Intrusion Prevention System IPS Software could allow an unauthenticated, remote attacker to cause the MainApp process to become unresponsive. This creates a denial of service DoS condition because the Cisco IPS sensor is not able to execute several critic...

Cisco Intrusion Prevention System SNMP报文拒绝服务漏洞

Bugtraq ID:65864 CVE ID:CVE-2014-2103 Cisco Intrusion Prevention System IPS是一款内联的报文检测分析功能，可用于检查大量的网络攻击。 Cisco Intrusion Prevention System IPS不正确处理SNMP报文信息，允许远程攻击者利用漏洞提交特制的SNMP报文，可使MainApp应用程序停止响应，造成拒绝服务攻击。 0 Cisco Intrusion Prevention System IPS 目前没有详细解决方案提供：...

Design/Logic Flaw

Cisco Intrusion Prevention System IPS Software allows remote attackers to cause a denial of service MainApp process outage via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309...

CVE-2014-2103

Cisco Intrusion Prevention System IPS Software allows remote attackers to cause a denial of service MainApp process outage via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309...

CVE-2014-2103

Cisco IPS Software is affected by CVE-2014-2103 where the MainApp process can be caused to hang (DoS) by malformed SNMP packets sent to the management interface. This requires SNMP to be enabled and, per advisories, is exploitable remotely by an unauthenticated attacker (for CSCul49309), with som...

PT-2014-4485

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a MainApp process outage, by sending malformed SNMP packets. Recommendation...