The UNIX and Linux Forums  

Go Back   The UNIX and Linux Forums > Special Forums > Security > Security Advisories (RSS)
Google UNIX.COM


Security Advisories (RSS) UNIX and Linux Security Advisories Via RSS News

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
S-168: net-snmp Vulnerability iBot Security Advisories (RSS) 0 02-11-2008 02:10 PM
Snmp stancwong UNIX for Dummies Questions & Answers 4 05-02-2006 02:55 AM
SNMP in HP-UX. Nguyen Quang Vu HP-UX 1 04-15-2005 08:02 AM
Snmp nean Linux 0 10-09-2003 08:27 AM
SNMP Vulnerability dpatel Security 1 02-12-2002 11:19 PM

Reply
 
Submit Tools LinkBack Thread Tools Search this Thread Display Modes
  #1  
Old 01-09-2008
iBot's Avatar
RSS Robot Girl
 

Join Date: Sep 2000
Posts: 14,296
USN-564-1: Net-SNMP vulnerability

Referenced CVEs:
CVE-2007-5846


Description:
===========================================================Ubuntu Security Notice USN-564-1 January 09, 2008net-snmp vulnerabilityCVE-2007-5846===========================================================A security issue affects the following Ubuntu releases:Ubuntu 6.06 LTSUbuntu 6.10Ubuntu 7.04Ubuntu 7.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 6.06 LTS: snmpd 5.2.1.2-4ubuntu2.2Ubuntu 6.10: snmpd 5.2.2-5ubuntu1.1Ubuntu 7.04: snmpd 5.2.3-4ubuntu1.1Ubuntu 7.10: snmpd 5.3.1-6ubuntu2.1In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:Bill Trost discovered that snmpd did not properly limit GETBULKrequests. A remote attacker could specify a large number ofmax-repetitions and cause a denial of service via resourceexhaustion.





More...
Reply With Quote
Google The UNIX and Linux Forums
Forum Sponsor
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes




All times are GMT -7. The time now is 09:08 AM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited.
The UNIX and Linux Forums Content Copyright ©1993-2008. All Rights Reserved.Ad Management by RedTyger Visit The Complex Event Processing Blog

Content Relevant URLs by vBSEO 3.2.0