[SECURITY] Fedora 16 Update: net-snmp-5.7.1-3.fc16

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

Fedora 17 : net-snmp-5.7.1-5.fc17 (2012-16662)

This update fixes : - Array index error, leading to out-of heap-based buffer read CVE-2012-2141 - Size values in hrStorageTable and hrFSTable. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 16 : net-snmp-5.7.1-3.fc16 (2012-16659)

This update fixes : - Array index error, leading to out-of heap-based buffer read CVE-2012-2141 - Size values in hrStorageTable and hrFSTable. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

HP/H3C and Huawei SNMP User Data Information Disclosure

The remote host allows SNMP read-only access to either h3c-user.mib or hh3c-user.mib. These MIBs contain information such as usernames, passwords, and user privileges. A remote attacker with a valid read-only community string could exploit this to enumerate usernames and passwords, which could le...

HP/H3C / Huawei equipment information leakage

Information leakage via SNMP...

HP/H3C and Huawei SNMP Weak Access to Critical Data

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP/H3C and Huawei SNMP Weak Access to Critical Data =================================================== http://grutztopia.jingojango.net/2012/10/hph3c-and-huawei-snmp-weak-access-to.html Overview - - -------- HP/H3C and Huawei networking equipment...

Security Advisory - SNMP vulnerability on Huawei multiple products

In some of Huawei products as affected products list below, there are MIBs which support the query of the local user account and password. However, the security authentication protection for SNMP V1 and V2 is not enough, which leads to the risk that the user account and password can be disclosed...

HP/H3C and Huawei networking equipment h3c-user snmp vulnerability

Overview HP/H3C and Huawei networking equipment contains a vulnerability which could allow an attacker to access administrative functions of the device using systems network management protocol SNMP requests. Description According to the researcher's report.:"HP/H3C and Huawei networking equipmen...

RealNetworks Helix Server SNMP Master Agent TCP Connection Denial of Service (CVE-2012-1923)

A denial of service vulnerability has been reported in RealNetworks Helix server. The vulnerability is due to an error in the way the SNMP Master Agent process handles connection terminations on TCP port 705. A remote attacker can exploit this issue by connecting to the target server on port...

ServersCheck Monitoring Software 9.0.129.0.14 - Persistent Cross-Site Scripting

ServersCheck Monitoring Software 9.0.129.0.14 - Persistent Cross-Site Scripting Author: loneferret of Offensive Security Product: ServersCheck Monitoring Software Version: 9.0.12 - 9.0.14 some versions of 9.0.15 Vendor Site: http://www.serverscheck.com Software Download:...

ServersCheck Monitoring Software 9.0.12/9.0.14 - Persistent Cross-Site Scripting

Author: loneferret of Offensive Security Product: ServersCheck Monitoring Software Version: 9.0.12 - 9.0.14 some versions of 9.0.15 Vendor Site: http://www.serverscheck.com Software Download: http://www.serverscheck.com/monitoringsoftware/download.asp Note: Older Appliances may be affected...

Ipswitch WhatsUp Gold Multiple Vulnerabilities

The remote host has a version of Ipswitch WhatsUp Gold prior to 15.0.3 and, as such, may be affected by the following vulnerabilities : - There is a blind SQL injection vulnerability in the 'sGroupList' parameter of the 'WrVMwareHostList.asp' script. CVE-2012-2601 - An unspecified cross-site...

Slackware Advisory SSA:2008-320-02 net-snmp

The remote host is missing an update as announced via advisory SSA:2008-320-02. OpenVAS Vulnerability Test $Id: esoftslkssa200832002.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2008-210-07 net-snmp

The remote host is missing an update as announced via advisory SSA:2008-210-07. OpenVAS Vulnerability Test $Id: esoftslkssa200821007.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2008-320-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2008-210-07)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Net-SNMP - SNMPD AgentX Subagent Timeout Denial of Service

source: https://www.securityfocus.com/bid/64048/info Net-SNMP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to cause the SNMPD to crash, exhaust CPU resources or trigger infinite loop; denying service to legitimate users. Net-SNMP 5.7.1 is vulnerable; othe...

Net-SNMP - SNMPD AgentX Subagent Timeout Denial of Service

Net-SNMP - SNMPD AgentX Subagent Timeout Denial of Service source: https://www.securityfocus.com/bid/64048/info Net-SNMP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to cause the SNMPD to crash, exhaust CPU resources or trigger infinite loop; denying...

Cisco Unified Computing System Fabric Interconnect SNMP Message Processing Denial of Service Vulnerability

Cisco Unified Computing System contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to errors in processing malicious Simple Network Management Protocol SNMP messages by the affected software. An...

ManageEngine OpUtils 6.0 - Persistent Cross-Site Scripting

Author: loneferret of Offensive Security Product: ManageEngine OpUtils Version: 6 Vendor Site: http://www.manageengine.com Software Download: http://www.manageengine.com/products/oputils/download.html Software Description: http://www.manageengine.com/products/oputils/oputils.html The toolset can ...