[slackware-security] net-snmp

New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-0960 https://vulners.com/cve/CVE-2008-2292 Here are the details...

Slackware 12.0 / 12.1 / current : net-snmp (SSA:2008-210-07)

New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-210-07. The text itself is copyright ...

Preemptive Protection againt Linux Kernel SNMP NAT Netfilter Memory Corruption Vulnerability

A denial of service vulnerability has been discovered in the Linux Kernel. Linux is a popular open-source operating system. The Linux kernel supports a packet filtering framework known as Netfilter. Netfilter is capable of processing various IP based protocols, including SNMP. A remote attacker m...

Sun Solaris系统管理代理SNMP守护程序缓冲区溢出漏洞

BUGTRAQ ID: CVE ID：CVE-2008-2292 CNCVE ID：CNCVE-20082292 Sun Solaris是一款商业性质的Unix操作系统。 Sun Solaris系统管理代理SMASNMP守护程序存在缓冲区溢出，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击，或以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Sun Solaris 10 可参考如下安全公告获得补丁信息： http://sunsolve.sun.com/search/document.do?assetkey=1-66-239785-1...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

CVE-2008-3149

The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service daemon crash by walking the hrSWInstalled OID branch in HOST-RESOURCES-MIB...

Design/Logic Flaw

The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service daemon crash by walking the hrSWInstalled OID branch in HOST-RESOURCES-MIB...

CVE-2008-3149

The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service daemon crash by walking the hrSWInstalled OID branch in HOST-RESOURCES-MIB...

CVE-2008-3149

The CVE-2008-3149 entry affects the SNMP daemon in F5 FirePass 1200 (version 6.0.2 hotfix 3). The vulnerability arises from handling the HOST-RESOURCES-MIB hrSWInstalled OID branch, enabling remote attackers to cause a denial-of-service (daemon crash). Exploitation details, impacted versions beyo...

CVE-2008-3149: Improper Limitation of a Pathname to a Restricted Directory

The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service daemon crash by walking the hrSWInstalled OID branch in HOST-RESOURCES-MIB...

Stack overflow

Multiple stack-based buffer overflows in the ServerView web interface SnmpGetMibValues.exe in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL...

F5 FirePass SNMP DoS

Crash on 1.3.6.1.2.1.25.6 traversing...

F5 FirePass 1200 SNMP daemon DoS

F5 FirePass 1200 SNMP daemon DoS Product: F5 FirePass 1200 http://www.f5.com/products/firepass/ The F5 FirePass 1200 SSL VPN appliance contains a denial-of-service vulnerability in the SNMP daemon. Traversing walking OID branch hrSWInstalled in HOST-RESOURCES-MIB OID 1.3.6.1.2.1.25.6 will cause t...

F5 FirePass SSL VPN SNMP守护程序远程拒绝服务漏洞

BUGTRAQ ID: 30090 CNCAN ID：CNCAN-2008070810 F5 FirePass SSL VPN设备允许用户安全的连接到关键业务应用设备上。 F5 FirePass 1200 SSL VPN应用设备包含的SNMP守护程序存在拒绝服务问题，远程攻击者可以利用漏洞使应用程序崩溃。 遍历HOST-RESOURCES-MIB OID 1.3.6.1.2.1.25.6中的hrSWInstalled OID分支可导致SNMP守护程序崩溃，目前不清楚是否可利用执行任意代码。 F5 FirePass 6.0.2.3 F5 FirePass 1200 目前没有解决方案提供：...

Solaris 9 (x86) : 137403-02

SunOS 5.9x86: snmpXdmid patch. Date this patch was last updated by Sun : Jun/24/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Fedora 9 : squid-3.0.STABLE7-1.fc9 (2008-6045)

CVE-2004-0918 Squid SNMP DoS Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Sun Solaris snmpXdmid(1M)远程拒绝服务漏洞

BUGTRAQ ID: 29965 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 运行在Solaris上的Sun Solstice企业SNMP-DMI映射器子代理守护程序（snmpXdmid1M）中的安全漏洞可能允许本地或远程非特权用户通过发送畸形报文杀死守护程序进程。如果出现了上述漏洞，snmpXdmid会core dump，core文件的pstack输出类似于： core 'core' of 362: /usr/lib/dmi/snmpXdmid -s hostname ----------------- lwp 2 / thread 2...