Red Hat Security AdvisoryRHSA-2008:0529
net-snmp security update
Released 2008-06-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 net-snmp-5.0.9-2.30E.24, net-snmp-5.0.9-2.30E.24.i386, net-snmp-devel-5.0.9-2.30E.24 +7
- Red Hat Enterprise Linux (v. 5 server) net-snmp-1:5.3.1-24.el5_2.1, net-snmp-1:5.3.1-24.el5_2.1.i386, net-snmp-1:5.3.1-24.el5_2.1.ia64 +17
- Red Hat Enterprise Linux AS EUS (v. 4.5) net-snmp-5.1.2-11.el4_6.11.3, net-snmp-5.1.2-11.el4_6.11.3.i386, net-snmp-5.1.2-11.el4_6.11.3.ia64 +17
- Red Hat Enterprise Linux AS version 3 net-snmp-5.0.9-2.30E.24, net-snmp-5.0.9-2.30E.24.i386, net-snmp-5.0.9-2.30E.24.ia64 +17
- Red Hat Enterprise Linux AS version 4 net-snmp-5.1.2-11.el4_6.11.3, net-snmp-5.1.2-11.el4_6.11.3.i386, net-snmp-5.1.2-11.el4_6.11.3.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) net-snmp-1:5.3.1-24.el5_2.1, net-snmp-1:5.3.1-24.el5_2.1.i386, net-snmp-libs-1:5.3.1-24.el5_2.1 +5
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) net-snmp-1:5.3.1-24.el5_2.1, net-snmp-devel-1:5.3.1-24.el5_2.1, net-snmp-devel-1:5.3.1-24.el5_2.1.i386
- Red Hat Enterprise Linux Desktop version 4 net-snmp-5.1.2-11.el4_6.11.3, net-snmp-5.1.2-11.el4_6.11.3.i386, net-snmp-devel-5.1.2-11.el4_6.11.3 +7
- Red Hat Enterprise Linux ES EUS (v. 4.5) net-snmp-5.1.2-11.el4_6.11.3, net-snmp-5.1.2-11.el4_6.11.3.i386, net-snmp-5.1.2-11.el4_6.11.3.ia64 +12
- Red Hat Enterprise Linux ES version 3 net-snmp-5.0.9-2.30E.24, net-snmp-5.0.9-2.30E.24.i386, net-snmp-5.0.9-2.30E.24.ia64 +12
- Red Hat Enterprise Linux ES version 4 net-snmp-5.1.2-11.el4_6.11.3, net-snmp-5.1.2-11.el4_6.11.3.i386, net-snmp-5.1.2-11.el4_6.11.3.ia64 +12
- Red Hat Enterprise Linux WS version 3 net-snmp-5.0.9-2.30E.24, net-snmp-5.0.9-2.30E.24.i386, net-snmp-5.0.9-2.30E.24.ia64 +12
- Red Hat Enterprise Linux WS version 4 net-snmp-5.1.2-11.el4_6.11.3, net-snmp-5.1.2-11.el4_6.11.3.i386, net-snmp-5.1.2-11.el4_6.11.3.ia64 +12
Fixes 2 records
Priority HIGH 80
SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetA…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.6879 · Published 2008-06-10 · Fixed CWE-287
Priority MEDIUM 41
Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.08443 · Published 2008-05-18 · Fixed CWE-119