Red Hat Security AdvisoryRHSA-2009:0295
net-snmp security update
Released 2009-03-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 net-snmp-5.0.9-2.30E.27, net-snmp-5.0.9-2.30E.27.i386, net-snmp-devel-5.0.9-2.30E.27 +7
- Red Hat Enterprise Linux AS version 3 net-snmp-5.0.9-2.30E.27, net-snmp-5.0.9-2.30E.27.i386, net-snmp-5.0.9-2.30E.27.ia64 +17
- Red Hat Enterprise Linux ES version 3 net-snmp-5.0.9-2.30E.27, net-snmp-5.0.9-2.30E.27.i386, net-snmp-5.0.9-2.30E.27.ia64 +12
- Red Hat Enterprise Linux WS version 3 net-snmp-5.0.9-2.30E.27, net-snmp-5.0.9-2.30E.27.i386, net-snmp-5.0.9-2.30E.27.ia64 +12
Fixes 1 record
Priority LOW 28
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02896 · Published 2009-02-12 · Fixed CWE-863
