6590 matches found
[SECURITY] [DLA 2313-1] net-snmp security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2313-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 04, 2020 https://wiki.debian.org/LTS -...
DLA-2313-1 net-snmp - security update
Bulletin has no description...
GLSA-202007-63 : SNMP Trap Translator: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202007-63 SNMP Trap Translator: Multiple vulnerabilities It was found that SNMP Trap Translator does not drop privileges as configured and does not properly escape shell commands in certain functions. Impact : A remote attacker, b...
CVE-2020-15861
Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link symlink following...
Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2020-1814)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-2299-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SNMP Trap Translator: Multiple vulnerabilities
Background SNMP Trap Translator SNMPTT is an SNMP trap handler written in Perl. Description It was found that SNMP Trap Translator does not drop privileges as configured and does not properly escape shell commands in certain functions. Impact A remote attacker, by sending a malicious crafted SNMP...
Debian DLA-2299-1 : net-snmp security update
A privilege escalation vulnerability vulnerability was discovered in Net-SNMP, a set of tools for collecting and organising information about devices on computer networks. Upstream notes that : - It is still possible to enable this MIB via the --with-mib-modules configure option. - Another MIB th...
[SECURITY] [DLA 2299-1] net-snmp security update
Package : net-snmp Version : 5.7.3+dfsg-1.7+deb9u2 Debian Bug : 965166 A privilege escalation vulnerability vulnerability was discovered in Net-SNMP, a set of tools for collecting and organising information about devices on computer networks. Upstream notes that: It is still possible to enable th...
EulerOS 2.0 SP8 : net-snmp (EulerOS-SA-2020-1814)
According to the version of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects...
DLA-2299-1 net-snmp - security update
Bulletin has no description...
PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting Author: AppleBois Version: 7xx ≤ 746 Homepage: https://pandorafms.org/ Software Link: https://sourceforge.net/projects/pandora/files/Pandora FMS 7.0NG/ CVE-2020-11749 By...
PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting
Exploit Title: PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting Date: 2020-07-01 Author: AppleBois Version: 7xx ≤ 746 Homepage: https://pandorafms.org/ Software Link: https://sourceforge.net/projects/pandora/files/Pandora FMS 7.0NG/ CVE-2020-11749 By asking network administrator to scan SN...
Autoenum - Automatic Service Enumeration Script
Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB, VulnHub, OSCP and draws a bit from a number of existing tools including AutoRecon https://github.com/Tib3rius/AutoRecon, Auto-Rec...
Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2018-18066)
Summary IBM MQ Appliance has resolved a denial of service vulnerability. Vulnerability Details CVEID: CVE-2018-18066 DESCRIPTION: Net-SNMP is vulnerable to a denial of service, caused by an error in snmpoidcompare in snmplib/snmpapi.c. By sending a specially-crafted UDP packet, a remote attacker...
Amazon Linux 2 : net-snmp (ALAS-2020-1454)
The version of net-snmp installed on the remote host is prior to 5.7.2-48. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1454 advisory. snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticate...
Medium: net-snmp
Issue Overview: snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. CVE-2018-18066 Affected Packages: net-snmp...
Important Photon OS Security Update - PHSA-2020-3.0-0114
Updates of 'net-snmp', 'apache-tomcat' packages of Photon OS have been released...