This security update fixes a denial of service vulnerability and an authentication bypass (CVE-2008-2292, CVE-2008-0960).

s700_800 11.X OV EMANATE15.3 IA-64 Consolidated Patch 6 : 

A potential vulnerability has been identified with HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows.
The vulnerability could be exploited remotely to gain unauthorized access.

SunOS 5.10: SMA patch.
Date this patch was last updated by Sun : May/11/17

This plugin has been deprecated and either replaced with individual 120272 patch-revision plugins, or deemed non-security related.

SunOS 5.10_x86: SMA patch.
Date this patch was last updated by Sun : May/11/17

This plugin has been deprecated and either replaced with individual 120273 patch-revision plugins, or deemed non-security related.

SunOS 5.10_x86: SMA patch.
Date this patch was last updated by Sun : Jun/29/11

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The Simple Network Management Protocol (SNMP) is a protocol used for network management.

A flaw was found in the way Net-SNMP checked an SNMPv3 packet's Keyed-Hash Message Authentication Code (HMAC). An attacker could use this flaw to spoof an authenticated SNMPv3 packet. (CVE-2008-0960)

A buffer overflow was found in the Perl bindings for Net-SNMP. This could be exploited if an attacker could convince an application using the Net-SNMP Perl module to connect to a malicious SNMP agent.
(CVE-2008-2292)

All users of net-snmp should upgrade to these updated packages, which contain backported patches to resolve these issues.

New net-snmp packages are available for Slackware 12.0, 12.1, and
-current to fix security issues.

The remote host is affected by the vulnerability described in GLSA-200808-02 (Net-SNMP: Multiple vulnerabilities)

    Wes Hardaker reported that the SNMPv3 HMAC verification relies on the     client to specify the HMAC length (CVE-2008-0960). John Kortink     reported a buffer overflow in the Perl bindings of Net-SNMP when     processing the OCTETSTRING in an attribute value pair (AVP) received by     an SNMP agent (CVE-2008-2292).
  Impact :

    An attacker could send SNMPv3 packets to an instance of snmpd providing     a valid user name and an HMAC length value of 1, and easily conduct     brute-force attacks to bypass SNMP authentication. An attacker could     further entice a user to connect to a malicious SNMP agent with an SNMP     client using the Perl bindings, possibly resulting in the execution of     arbitrary code.
  Workaround :

    There is no known workaround at this time.

SNMPv3 HMAC verification relies on the client to specify the HMAC length. This flexibility allows remote attackers to bypass SNMP authentication by specifying a length value of 1 , which only checks the first byte.

SNMPv3 HMAC verification relies on the client to specify the HMAC length.  This makes it possible for remote attackers to bypass SNMP authentication via repeated attempts with a HMAC length value of 1, which causes only the first byte of the authentication hash to be checked. 

This issue affects SNMP implementations from multiple vendors.

Multiple Cisco products contain either of two authentication vulnerabilities in the Simple Network Management Protocol version 3 (SNMPv3) feature. These vulnerabilities can be exploited when processing a malformed SNMPv3 message. These vulnerabilities could allow the disclosure of network information or may enable an attacker to perform configuration changes to vulnerable devices. The SNMP server is an optional service that is disabled by default in Cisco products. Only SNMPv3 is impacted by these vulnerabilities.
Workarounds are available for mitigating the impact of the vulnerabilities described in this document. Note: SNMP versions 1, 2 and 2c are not impacted by these vulnerabilities. The United States Computer Emergency Response Team (US-CERT) has assigned Vulnerability Note VU#878044.

I Security Issues

  a. OpenSSL Binaries Updated

  This fix updates the third-party OpenSSL library.

  The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the names CVE-2007-3108 and CVE-2007-5135 to the issues   addressed by this update.

II Service Console rpm updates

  a. net-snmp Security update

  This fix upgrades the service console rpm for net-snmp to version   net-snmp-5.0.9-2.30E.24.
   Note: this update is relevant for ESX 3.0.3. The initial advisory   incorrectly stated that this update was present in ESX 3.0.3   when it was released on August 8, 2008.

  The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the names CVE-2008-2292 and CVE-2008-0960 to the issues   addressed in net-snmp-5.0.9-2.30E.24.

  b. perl Security update

  This fix upgrades the service console rpm for perl to version   perl-5.8.0-98.EL3.

  Note: this update is relevant for ESX 3.0.3. The initial advisory   incorrectly stated that this update was present in ESX 3.0.3   when it was released on August 8, 2008.

  The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the name CVE-2008-1927 to the issue addressed in   perl-5.8.0-98.EL3.

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.4.  Mac OS X 10.5.4 contains security fixes for a number of programs.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
40045	openSUSE Security Update : libsnmp15 (libsnmp15-87)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	critical
47754	HP-UX PHSS_39887 : HP OpenView SNMP Emanate Master Agent Remote Unauthorized Access (HPSBMA02439 SSRT080082 rev.3)	Nessus	HP-UX Local Security Checks	2010/7/19	2021/1/11	critical
25272	Solaris 10 (sparc) : 120272-40 (deprecated)	Nessus	Solaris Local Security Checks	2007/5/20	2021/1/14	critical
25391	Solaris 10 (x86) : 120273-42 (deprecated)	Nessus	Solaris Local Security Checks	2007/6/4	2021/1/14	critical
107861	Solaris 10 (x86) : 120273-33	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/23	critical
33142	CentOS 3 / 4 / 5 : net-snmp (CESA-2008:0529)	Nessus	CentOS Local Security Checks	2008/6/12	2021/1/4	critical
33752	Slackware 12.0 / 12.1 / current : net-snmp (SSA:2008-210-07)	Nessus	Slackware Local Security Checks	2008/7/29	2021/1/14	critical
33832	GLSA-200808-02 : Net-SNMP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2008/8/7	2021/1/6	critical
78225	F5 Networks BIG-IP : SNMPv3 HMAC verification vulnerability (SOL8939)	Nessus	F5 Networks Local Security Checks	2014/10/10	2021/1/11	critical
40449	Multiple Vendor HMAC Authentication SNMPv3 Authentication Bypass	Nessus	SNMP	2009/7/31	2022/2/28	critical
66697	SNMP Version 3 Authentication Bypass Vulnerabilities (cisco-sa-20080610-snmpv3)	Nessus	CISCO	2013/5/31	2019/10/29	critical
40381	VMSA-2008-0013 : Updated ESX packages for OpenSSL, net-snmp, perl	Nessus	VMware ESX Local Security Checks	2009/7/27	2021/1/6	critical
4564	Mac OS X < 10.5.4 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2004/8/18	2019/3/6	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical