VMSA-2008-0007 : Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus

a. Updated pcre Service Console package addresses several security issues The pcre package contains the Perl-Compatible Regular Expression library. pcre is used by various Service Console utilities. Several security issues were discovered in the way PCRE handles regular expressions. If an...

VMSA-2008-0013 : Updated ESX packages for OpenSSL, net-snmp, perl

I Security Issues a. OpenSSL Binaries Updated This fix updates the third-party OpenSSL library. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2007-3108 and CVE-2007-5135 to the issues addressed by this update. II Service Console rpm updates a. net-snmp...

openSUSE Security Update : libsnmp15 (libsnmp15-319)

Remote attackers could crash net-snmp via GETBULK-Request CVE-2008-4309. In addition the following non-security issues have been fixed : - typo in error message bnc439857 - fix duplicate registration warnings on startup bnc326957 - container insert errors reproducable with shared ip setups...

openSUSE Security Update : libsnmp15 (libsnmp15-87)

This security update fixes a denial of service vulnerability and an authentication bypass CVE-2008-2292, CVE-2008-0960. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsnmp15-87. The text...

openSUSE Security Update : libsnmp15 (libsnmp15-879)

With this update of net-snmp the handling of TCP wrappers rules for client authorization was improved, prior to this update it was possible for remote attackers to bypass intended access restrictions and execute SNMP queries. CVE-2008-6123 Additionally binding to multiple interfaces was improved...

openSUSE Security Update : libsnmp15 (libsnmp15-879)

With this update of net-snmp the handling of TCP wrappers rules for client authorization was improved, prior to this update it was possible for remote attackers to bypass intended access restrictions and execute SNMP queries. CVE-2008-6123 Additionally binding to multiple interfaces was improved...

[ MDVSA-2009:156 ] net-snmp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:156 http://www.mandriva.com/security/ Package : net-snmp Date : July 19, 2009 Affected: Corporate 3.0, Multi Network Firewall 2.0 Problem Description: A vulnerability has been found and corrected in net-snmp...

net-snmp multiple security vulnerabilities

Buffer overflow in snmpget, integer overflow in SNMP agent...

Tandberg MXP F7.0 (USER) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================== Tandberg MXP F7.0 USER Remote Buffer Overflow PoC =================================================== TANDBERG BoF v0.1 - Tandberg MXP F7.0 Buffer Overflow Vulnerability PoC By otokoyama + We...

HP OpenView网络节点管理器rping栈溢出漏洞

BUGTRAQ ID: 35267 CVECAN ID: CVE-2009-1420 HP OpenView网络节点管理器（OV NNM）是HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。 对于运行SNMP和MIB的OV NNM，远程攻击者可以通过向rping提交恶意请求触发栈溢出，导致执行任意代码。 HP OpenView Network Node Manager 7.53 HP OpenView Network Node Manager 7.51 临时解决方法： 更改session.conf文件，将UserLogin设置为ON，以要求提供有效的凭据。 厂商补丁： H...

CentOS Security Advisory CESA-2009:1124 (net-snmp)

The remote host is missing updates to net-snmp announced in advisory CESA-2009:1124. CESA-2009:1124 64326 2 $Id: ovcesa20091124.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1124 net-snmp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:1124

The remote host is missing updates announced in advisory RHSA-2009:1124. The Simple Network Management Protocol SNMP is a protocol used for network management. A divide-by-zero flaw was discovered in the snmpd daemon. A remote attacker could issue a specially-crafted GETBULK request that could...

CentOS Security Advisory CESA-2009:1124 (net-snmp)

The remote host is missing updates to net-snmp announced in advisory CESA-2009:1124. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

RedHat Security Advisory RHSA-2009:1124

The remote host is missing updates announced in advisory RHSA-2009:1124. The Simple Network Management Protocol SNMP is a protocol used for network management. A divide-by-zero flaw was discovered in the snmpd daemon. A remote attacker could issue a specially-crafted GETBULK request that could...

HP OpenView Network Node Manager SNMP code execution

Bufffer overflow in rping application...

Code injection

agent/snmpagent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux RHEL 3 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309...

CVE-2009-1887

agent/snmpagent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux RHEL 3 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309...

CVE-2009-1887

agent/snmpagent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux RHEL 3 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309...

CVE-2009-1887

agent/snmpagent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux RHEL 3 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309...

CVE-2009-1887

CVE-2009-1887 affects NET-SNMP’s snmpd (agent/snmp_agent.c). A remote attacker can trigger a divide-by-zero via a crafted SNMP GETBULK request, causing a denial of service (daemon crash). The root cause is an integer/subtree cache handling flaw in netsnmp_create_subtree_cache in agent/snmp_agent....