CVE-2008-6123

CVE-2008-6123 affects net-snmp, specifically the netsnmp_udp_fmtaddr function in net-snmp versions 5.0.9 through 5.4.2.1. When using TCP wrappers for client authorization, the function does not properly parse hosts.allow rules, which can allow remote attackers to bypass access restrictions and ex...

CVE-2008-6123

The netsnmpudpfmtaddr function snmplib/snmpUDPDomain.c in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to...

CVE-2008-6123

The netsnmpudpfmtaddr function snmplib/snmpUDPDomain.c in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to...

CVE-2008-6123: Incorrect Authorization

The netsnmpudpfmtaddr function snmplib/snmpUDPDomain.c in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to...

PT-2009-1598 · Net Snmp · Net-Snmp

Name of the Vulnerable Software and Affected Versions: net-snmp versions 5.0.9 through 5.4.2.1 Description: The issue is related to the netsnmp udp fmtaddr function in snmplib/snmpUDPDomain.c, which does not properly parse hosts.allow rules when using TCP wrappers for client authorization. This...

Update Protection against Net-SNMP Denial of Service

Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3. Net-SNMP is available for many Unix and Unix-like operating systems and also for Microsoft Windows. Net-SNMP is vulnerable to a denial of service that can be triggerred by sending a specially-crafted SNMP GETBULK...

snmp-brute NSE Script

Attempts to find an SNMP community string by brute force guessing. This script opens a sending socket and a sniffing pcap socket in parallel threads. The sending socket sends the SNMP probes with the community strings, while the pcap socket sniffs the network for an answer to the probes. If valid...

Nessus UDP Scanner

Binary data nessusudpscanner.nbin...

Profense Web Application Firewall 2.6.2 XSRF/XSS Vulnerabilities

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html "Defenses against all OWASP Top Ten vulnerabilities" Too bad it doesn't defend its...

Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery Cross-Site Scripting

Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery Cross-Site Scripting Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html "Defenses against all OWASP...

Gentoo Security Advisory GLSA 200901-15 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200901-15. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200901-15 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200901-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : net-snmp (ZYPP Patch Number 5807)

Remote attackers could crash net-snmp via GETBULK-Request. CVE-2008-4309 In addition the following non-security issues have been fixed : - typo in error message. bnc439857 - fix duplicate registration warnings on startup. bnc326957 - container insert errors reproducable with shared ip setups...

SuSE Update for net-snmp SUSE-SA:2008:039

Check for the Version of net-snmp OpenVAS Vulnerability Test $Id: gbsuse2008039.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for net-snmp SUSE-SA:2008:039 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

SuSE Update for cups SUSE-SA:2008:002

Check for the Version of cups OpenVAS Vulnerability Test $Id: gbsuse2008002.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for cups SUSE-SA:2008:002 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

GLSA-200901-15 : Net-SNMP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200901-15 Net-SNMP: Denial of Service Oscar Mira-Sanchez reported an integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c when processing GETBULK requests. Impact : A remote attacker could send a special...

Net-SNMP: Denial of service

Background Net-SNMP is a collection of tools for generating and retrieving SNMP data. Description Oscar Mira-Sanchez reported an integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c when processing GETBULK requests. Impact A remote attacker could send a specially crafte...

Netgear WG102 SNMP Password Leak

Dear all, after informing Netgear about the unsafe handling of passwords on their WG102 Access Points nothing happened for several weeks. To inform other users about the potential threat to their networks I decided to share my findings. WG102 offers the the typical SNMP write & SNMP read communit...

Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point

Dear all, after informing Netgear about the unsafe handling of passwords on their WG102 Access Points nothing happened for several weeks. To inform other users about the potential threat to their networks I decided to share my findings. WG102 offers the the typical SNMP write & SNMP read communit...

Netgear WG102 Leaks SNMP write password with read access

No description provided by source. Dear all, after informing Netgear about the unsafe handling of passwords on their WG102 Access Points nothing happened for several weeks. To inform other users about the potential threat to their networks I decided to share my findings. WG102 offers the the...