Linux Kernel < 2.6.16.18 (Netfilter NAT SNMP Module) Remote DoS Exploit

Exploit for linux platform in category dos / poc ======================================================================= Linux Kernel Yuri Gushin A patch review we did on the 2.6.16.17-18 Linux kernel source tree revealed a restructuring of code in the snmpparsemangle and the snmptrapdecode...

Linux Kernel 2.6.16.18 - Netfilter NAT SNMP Module Remote Denial of Service

Linux Kernel 2.6.16.18 - Netfilter NAT SNMP Module Remote Denial of Service / ecl-nf-snmpwn.c - 30/05/06 Alex Behar Yuri Gushin A patch review we did on the 2.6.16.17-18 Linux kernel source tree revealed a restructuring of code in the snmpparsemangle and the snmptrapdecode functions. After furthe...

Linux Kernel < 2.6.16.18 - Netfilter NAT SNMP Module Remote Denial of Service

/ ecl-nf-snmpwn.c - 30/05/06 Alex Behar Yuri Gushin A patch review we did on the 2.6.16.17-18 Linux kernel source tree revealed a restructuring of code in the snmpparsemangle and the snmptrapdecode functions. After further research it turned out to be a vulnerability previously reported1 and...

CVE-2006-2444

The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...

CVE-2006-2444

The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...

CVE-2006-2444

The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...

CVE-2006-2444

CVE-2006-2444 affects the Linux kernel SNMP NAT Netfilter processing. The vulnerability in snmp_trap_decode (kernel = 2.6.16.18) or applying vendor patches where applicable. No additional exploitation details are provided in the documents.

CVE-2006-2444: Undefined Security Weakness

The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...

Mandrake Linux Security Advisory : net-snmp (MDKSA-2006:025)

The fixproc application in Net-SNMP creates temporary files with predictable file names which could allow a malicious local attacker to change the contents of the temporary file by exploiting a race condition, which could possibly lead to the execution of arbitrary code. As well, a local attacker...

net-snmp SNMP package fixproc utility symbolic link problem

Symbolic links problem on temporary files creation...

[Full-disclosure] [ MDKSA-2006:025 ] - Updated net-snmp packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:025 http://www.mandriva.com/security/ Package : net-snmp Date : January 26, 2006 Affected: 10.1, 10.2, Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The fixproc application in Net-SNMP creat...

CVE-2006-0250

CVE-2006-0250 affects the CMU SNMP utilities (cmu-snmp), specifically the snmptrapd component’s snmp_input function. The root cause is a format string vulnerability that enables remote code execution by sending crafted SNMP messages to UDP port 162. Several connected sources confirm the vulnerabl...

CVE-2006-0250

Format string vulnerability in the snmpinput function in snmptrapd in CMU SNMP utilities cmu-snmp allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162...

Format string

Format string vulnerability in the snmpinput function in snmptrapd in CMU SNMP utilities cmu-snmp allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162...

PT-2006-1325 · Cmu · Cmu-Snmp

Name of the Vulnerable Software and Affected Versions: CMU SNMP utilities cmu-snmp affected versions not specified Description: The issue is related to a format string vulnerability in the snmp input function in snmptrapd. This vulnerability allows remote attackers to execute arbitrary code by...

CVE-2006-0250: Undefined Security Weakness

Format string vulnerability in the snmpinput function in snmptrapd in CMU SNMP utilities cmu-snmp allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162...

Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability

CMU SNMP utilities snmptrad Format String Vulnerability Digital Armaments advisory is 01.04.2006 http://www.digitalarmaments.com/2006040164883273.html I. Background The package is CMU-SNMP utilities. In this package snmptrapd is an SNMP application that receives and logs SNMP TRAP and INFORM...

CMU SNMP snmptrapd format string vulnerability

Format string vulnerability in snmpinput function...

Ubuntu 4.10 / 5.04 / 5.10 : ucd-snmp vulnerability (USN-190-2)

USN-190-1 fixed a vulnerability in the net-snmp library. It was discovered that the same problem also affects the ucs-snmp implementation which is used by the Cyrus email server. Original advisory : A remote Denial of Service has been discovered in the SMNP Simple Network Management Protocol...

Ubuntu 4.10 / 5.04 : net-snmp vulnerability (USN-190-1)

A remote Denial of Service has been discovered in the SMNP Simple Network Management Protocol library. If a SNMP agent uses TCP sockets for communication, a malicious SNMP server could exploit this to crash the agent. Please note that by default SNMP uses UDP sockets. Note that Tenable Network...