USN-169-1: Linux kernel vulnerabilities

David Howells discovered a local Denial of Service vulnerability in the key session joining function. Under certain user-triggerable conditions, a semaphore was not released properly, which caused processes which also attempted to join a key session to hang forever. This only affects Ubuntu 5.04...

RHEL 2.1 : ucd-snmp (RHSA-2005:720)

Updated ucd-snmp packages that a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used for network management. A denial of servic...

ucd security update

CentOS Errata and Security Advisory CESA-2005:720-01 Updated ucd-snmp packages that a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a...

Low: Red Hat Security Advisory: ucd-snmp security update

Updated ucd-snmp packages that a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used for network management. A denial of servic...

CVE-2002-2112

CVE-2002-2112 affects RCA Digital Cable Modem DCM225 and DCM225E, and other DOCSIS-conforming modems, via SNMP using the default public community string. The underlying issue is exposure of MIB information to remote readers/writers, enabling read/write access to SNMP MIB data. The available docum...

CVE-2002-2112

RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information...

CVE-2004-2300

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this...

CVE-2004-2300

The CVE-2004-2300 entry concerns a buffer overflow in snmpd for ucd-snmp 4.2.6 and earlier when run as root-setuid. Local users could potentially execute arbitrary code via a long -p argument. Multiple sources (Red Hat, Debian security tracker, NVD) reiterate the same description; there is explic...

CVE-2004-2300: Undefined Security Weakness

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this...

CVE-2002-2112: Undefined Security Weakness

RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information...

Fedora Core 3 : net-snmp-5.2.1.2-FC3.1 (2005-562)

Wed Jul 13 2005 Radek Vokal - CVE-2005-2177 new upstream version fixing DoS 162908 - CVE-2005-1740 net-snmp insecure temporary file usage 158770 - session free fixed, agentx modules build fine 157851 - report gigabit Ethernet speeds using Ethtool 152480 Note that Tenable Network Security has...

Fedora Core 4 : net-snmp-5.2.1.2-fc4.1 (2005-561)

A security vulnerability has been found in Net-SNMP releases that could allow a denial of service attack against Net-SNMP agent's which have opened a stream based protocol EG, TCP but not UDP; it should be noted that Net-SNMP does not by default open a TCP port...

FreeBSD : gnu-radius -- SNMP-related denial-of-service (e6f0edd8-0b40-11d9-8a8a-000c41e2cdad)

An iDEFENSE security advisory reports : Remote exploitation of an input validation error in version 1.2 of GNU radiusd could allow a denial of service. The vulnerability specifically exists within the asndecodestring function defined in snmplib/asn1.c. When a very large unsigned number is supplie...

FreeBSD : net-snmp -- fixproc insecure temporary file creation (3e0072d4-d05b-11d9-9aed-000e0c2e438a)

A Gentoo advisory reports : Net-SNMP creates temporary files in an insecure manner, possibly allowing the execution of arbitrary code. A malicious local attacker could exploit a race condition to change the content of the temporary files before they are executed by fixproc, possibly leading to th...

FreeBSD : net-snmp -- remote DoS vulnerability (b2a1a3b5-ed95-11d9-8310-0001020eed82)

A Net-SNMP release announcement reports : A security vulnerability has been found in Net-SNMP releases that could allow a denial of service attack against Net-SNMP agent's which have opened a stream based protocol EG, TCP but not UDP; it should be noted that Net-SNMP does not by default open a TC...

DEBIAN-CVE-2005-2177

Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service daemon hang and CPU consumption via a TCP packet of length 1, which triggers an infinite loop...

CVE-2005-2177

Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service daemon hang and CPU consumption via a TCP packet of length 1, which triggers an infinite loop...

CVE-2005-2177

Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service daemon hang and CPU consumption via a TCP packet of length 1, which triggers an infinite loop...

CVE-2005-2177

Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service daemon hang and CPU consumption via a TCP packet of length 1, which triggers an infinite loop...

CVE-2005-2177

The CVE-2005-2177 issue affects Net-SNMP 5.0.x (before 5.0.10.2), 5.2.x (before 5.2.1.2), and 5.1.3 when using stream sockets (TCP). A crafted TCP segment of length 1 can trigger an infinite loop, causing remote denial of service through daemon hang and high CPU usage. Related advisories in OSV/O...