USN-564-1: Net-SNMP vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-564-1: Net-SNMP vulnerability
# 1  
Old 01-09-2008
USN-564-1: Net-SNMP vulnerability

Referenced CVEs:
CVE-2007-5846


Description:
===========================================================Ubuntu Security Notice USN-564-1 January 09, 2008net-snmp vulnerabilityCVE-2007-5846===========================================================A security issue affects the following Ubuntu releases:Ubuntu 6.06 LTSUbuntu 6.10Ubuntu 7.04Ubuntu 7.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 6.06 LTS: snmpd 5.2.1.2-4ubuntu2.2Ubuntu 6.10: snmpd 5.2.2-5ubuntu1.1Ubuntu 7.04: snmpd 5.2.3-4ubuntu1.1Ubuntu 7.10: snmpd 5.3.1-6ubuntu2.1In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:Bill Trost discovered that snmpd did not properly limit GETBULKrequests. A remote attacker could specify a large number ofmax-repetitions and cause a denial of service via resourceexhaustion.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread

5 More Discussions You Might Find Interesting

1. HP-UX

Net-snmp 5.7.2 on HP-UX 11.31

Hi All, I have an issue with net-snmp communication from a monitoring server to HP UX server. Following are the details HP - UX server : 172.16.184.34 Monitoring Server : 172.16.5.57 (Solarwinds Application)I'm running HP-UX's snmp on udp port 161 and net-snmp on udp 1161. ... (0 Replies)
Discussion started by: maverick_here
0 Replies

2. Infrastructure Monitoring

net-snmp issue

When I run a script that polls a router I get the following error from net-snmp. I can not seem to find a straight answer. Could my mib files be corrupt? xxx-xxx:/etc/sma/snmp/mibs# perl /export/home/user/perl/test.pl Unlinked OID in SNMPv2-MIB: snmp ::= { mib-2 11 } Undefined identifier:... (2 Replies)
Discussion started by: mrlayance
2 Replies

3. Solaris

net-snmp on solaris 8

hello I am running solaris 8 sparc. I installed net-snmp 5.4.1 (compiled it from tar file). When I do snmpwalk from another server, I receive a partial list of OIDs then it stops and gives 'timeout. No response...' another snmpwalk will directly timeouts. I compiled again the binaries... (1 Reply)
Discussion started by: melanie_pfefer
1 Replies

4. Solaris

net-snmp-5.1.2 Solaris 9

All, I downloaded and installed the following net-snmp from the sourceforge.net website on a Solaris 9 server with the entire collection installed: net-snmp-5.1.2-SunOS_5.9_sun4u.tar.gz with no errors. I attempt to run snmpget and I get the following error: ld.so.1: snmpget: fatal:... (1 Reply)
Discussion started by: bubba112557
1 Replies

5. UNIX for Dummies Questions & Answers

net-snmp

Does anybody know where I can get net-snmp for compaq tru64 V4.0G? I am having a difficult time locating it. Can it run on tru64 V4.0G? (2 Replies)
Discussion started by: jalburger
2 Replies
Login or Register to Ask a Question
cups-snmp(8)							    Apple Inc.							      cups-snmp(8)

NAME
snmp - cups snmp backend SYNOPSIS
/usr/lib/cups/backend/snmp ip-address-or-hostname /usr/libexec/cups/backend/snmp ip-address-or-hostname lpinfo -v --include-schemes snmp DESCRIPTION
The CUPS SNMP backend provides legacy discovery and identification of network printers using SNMPv1. When used for discovery through the scheduler, the backend will list all printers that respond to a broadcast SNMPv1 query with the "public" community name. Additional queries are then sent to printers that respond in order to determine the correct device URI, make and model, and other information needed for printing. In the first form, the SNMP backend is run directly by the user to look up the device URI and other information when you have an IP address or hostname. This can be used for programs that need to configure print queues where the user has supplied an address but nothing else. In the second form, the SNMP backend is run indirectly using the lpinfo(8) command. The output provides all printers detected via SNMP on the configured broadcast addresses. Note: no broadcast addresses are configured by default. ENVIRONMENT
The DebugLevel value can be overridden using the CUPS_DEBUG_LEVEL environment variable. The MaxRunTime value can be overridden using the CUPS_MAX_RUN_TIME environment variable. FILES
The SNMP backend reads the /etc/cups/snmp.conf configuration file, if present, to set the default broadcast address, community name, and logging level. CONFORMING TO
The CUPS SNMP backend uses the information from the Host, Printer, and Port Monitor MIBs along with some vendor private MIBs and intelli- gent port probes to determine the correct device URI and make and model for each printer. SEE ALSO
backend(7), cups-snmp.conf(5), cupsd(8), lpinfo(8), CUPS Online Help (http://localhost:631/help) COPYRIGHT
Copyright (C) 2007-2017 by Apple Inc. 10 June 2014 CUPS cups-snmp(8)