Multiple Cisco products contain either of two authentication vulnerabilities in the Simple Network Management Protocol version 3 (SNMPv3) feature.  These vulnerabilities can be exploited when processing a malformed SNMPv3 message.  The vulnerabilities could allow the disclosure of network information or may enable an attacker to perform configuration changes to vulnerable devices.  The SNMP server is an optional service that is disabled by default in Cisco products.  Only SNMPv3 is impacted by these vulnerabilities.  Workarounds are available for mitigating the impact of the vulnerabilities described in this document.  Note: SNMP versions 1, 2 and 2c are not impacted by these vulnerabilities.  The United States Computer Emergency Response Team (US-CERT) has assigned Vulnerability Note VU#878044.

I Security Issues

  a. OpenSSL Binaries Updated

  This fix updates the third-party OpenSSL library.

  The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the names CVE-2007-3108 and CVE-2007-5135 to the issues   addressed by this update.

II Service Console rpm updates

  a. net-snmp Security update

  This fix upgrades the service console rpm for net-snmp to version   net-snmp-5.0.9-2.30E.24.
   Note: this update is relevant for ESX 3.0.3. The initial advisory   incorrectly stated that this update was present in ESX 3.0.3   when it was released on August 8, 2008.

  The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the names CVE-2008-2292 and CVE-2008-0960 to the issues   addressed in net-snmp-5.0.9-2.30E.24.

  b. perl Security update

  This fix upgrades the service console rpm for perl to version   perl-5.8.0-98.EL3.

  Note: this update is relevant for ESX 3.0.3. The initial advisory   incorrectly stated that this update was present in ESX 3.0.3   when it was released on August 8, 2008.

  The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the name CVE-2008-1927 to the issue addressed in   perl-5.8.0-98.EL3.

SunOS 5.10: SMA patch.
Date this patch was last updated by Sun : Jun/30/11

s700_800 11.X OV EMANATE15.3 IA-64 Consolidated Patch 6 : 

A potential vulnerability has been identified with HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows.
The vulnerability could be exploited remotely to gain unauthorized access.

SunOS 5.10: SMA patch.
Date this patch was last updated by Sun : May/11/17

This plugin has been deprecated and either replaced with individual 120272 patch-revision plugins, or deemed non-security related.

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-81:01 advisory.

    The Simple Network Management Protocol (SNMP) is a protocol used for network management.
    CVE 2008-2292     Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used     in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute     arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).
    CVE 2008-0960     SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before     5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through     2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7)     multiple Cisco IOS, CatOS, ACE, and Nexus products; and (8) Ingate Firewall 3.1.0 and later and SIParator     3.1.0 and later relies on the client to specify the HMAC length, which makes it easier for remote     attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The Simple Network Management Protocol (SNMP) is a protocol used for network management.

A flaw was found in the way Net-SNMP checked an SNMPv3 packet's Keyed-Hash Message Authentication Code (HMAC). An attacker could use this flaw to spoof an authenticated SNMPv3 packet. (CVE-2008-0960)

A buffer overflow was found in the Perl bindings for Net-SNMP. This could be exploited if an attacker could convince an application using the Net-SNMP Perl module to connect to a malicious SNMP agent.
(CVE-2008-2292)

All users of net-snmp should upgrade to these updated packages, which contain backported patches to resolve these issues.

Updated ucd-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The Simple Network Management Protocol (SNMP) is a protocol used for network management.

A flaw was found in the way ucd-snmp checked an SNMPv3 packet's Keyed-Hash Message Authentication Code (HMAC). An attacker could use this flaw to spoof an authenticated SNMPv3 packet. (CVE-2008-0960)

All users of ucd-snmp should upgrade to these updated packages, which contain a backported patch to resolve this issue.

New net-snmp packages are available for Slackware 12.0, 12.1, and
-current to fix security issues.

Several vulnerabilities have been discovered in NET SNMP, a suite of Simple Network Management Protocol applications. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2008-0960     Wes Hardaker reported that the SNMPv3 HMAC verification     relies on the client to specify the HMAC length, which     allows spoofing of authenticated SNMPv3 packets.

  - CVE-2008-2292     John Kortink reported a buffer overflow in the
    __snprint_value function in snmp_get causing a denial of     service and potentially allowing the execution of     arbitrary code via a large OCTETSTRING in an attribute     value pair (AVP).

  - CVE-2008-4309     It was reported that an integer overflow in the     netsnmp_create_subtree_cache function in     agent/snmp_agent.c allows remote attackers to cause a     denial of service attack via a crafted SNMP GETBULK     request.

a. Updated ESX Service Console package libxml2

   A denial of service flaw was found in the way libxml2 processes    certain content. If an application that is linked against    libxml2 processes malformed XML content, the XML content might    cause the application to stop responding.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-3281 to this issue.

   Additionally the following was also fixed, but was missing in the    security advisory.

   A heap-based buffer overflow flaw was found in the way libxml2    handled long XML entity names. If an application linked against    libxml2 processed untrusted malformed XML content, it could cause    the application to crash or, possibly, execute arbitrary code.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-3529 to this issue.

b. Updated ESX Service Console package ucd-snmp

   A flaw was found in the way ucd-snmp checks an SNMPv3 packet's    Keyed-Hash Message Authentication Code. An attacker could use    this flaw to spoof an authenticated SNMPv3 packet.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-0960 to this issue.

c. Updated third-party library libtiff

   Multiple uses of uninitialized values were discovered in libtiff's    Lempel-Ziv-Welch (LZW) compression algorithm decoder. An attacker    could create a carefully crafted LZW-encoded TIFF file that would    cause an application linked with libtiff to crash or, possibly,    execute arbitrary code.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-2327 to this issue.

This security update of net-snmp fixes a denial of service vulnerability (CVE-2008-2292), an authentication bypass (CVE-2008-0960) and several memory leaks.

In addition net-snmp was patched to allow customization of the agent address set.

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0529 advisory.

  - net-snmp SNMPv3 authentication bypass (VU#877044) (CVE-2008-0960)

  - net-snmp: buffer overflow in perl module's Perl Module __snprint_value() (CVE-2008-2292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.4. 

Mac OS X 10.5.4 contains security fixes for multiple components.

The remote host is affected by the vulnerability described in GLSA-200808-02 (Net-SNMP: Multiple vulnerabilities)

    Wes Hardaker reported that the SNMPv3 HMAC verification relies on the     client to specify the HMAC length (CVE-2008-0960). John Kortink     reported a buffer overflow in the Perl bindings of Net-SNMP when     processing the OCTETSTRING in an attribute value pair (AVP) received by     an SNMP agent (CVE-2008-2292).
  Impact :

    An attacker could send SNMPv3 packets to an instance of snmpd providing     a valid user name and an HMAC length value of 1, and easily conduct     brute-force attacks to bypass SNMP authentication. An attacker could     further entice a user to connect to a malicious SNMP agent with an SNMP     client using the Perl bindings, possibly resulting in the execution of     arbitrary code.
  Workaround :

    There is no known workaround at this time.

This security update fixes a denial of service vulnerability and an authentication bypass (CVE-2008-2292, CVE-2008-0960).

The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-004 applied. 

This update contains security fixes for a number of programs.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
71433	SNMP Version 3 Authentication Vulnerabilities (cisco-sa-20080610-snmpv3)	Nessus	CISCO	2013/12/14	2021/4/8	critical
40381	VMSA-2008-0013 : Updated ESX packages for OpenSSL, net-snmp, perl	Nessus	VMware ESX Local Security Checks	2009/7/27	2021/1/6	critical
107359	Solaris 10 (sparc) : 120272-31	Nessus	Solaris Local Security Checks	2018/3/12	2026/1/15	critical
47754	HP-UX PHSS_39887 : HP OpenView SNMP Emanate Master Agent Remote Unauthorized Access (HPSBMA02439 SSRT080082 rev.3)	Nessus	HP-UX Local Security Checks	2010/7/19	2021/1/11	critical
25272	Solaris 10 (sparc) : 120272-40 (deprecated)	Nessus	Solaris Local Security Checks	2007/5/20	2021/1/14	critical
284272	MiracleLinux 3 : net-snmp-5.3.1-19.1.1AXS3 (AXSA:2008-81:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/2/12	critical
33142	CentOS 3 / 4 / 5 : net-snmp (CESA-2008:0529)	Nessus	CentOS Local Security Checks	2008/6/12	2021/1/4	critical
33156	RHEL 2.1 : ucd-snmp (RHSA-2008:0528)	Nessus	Red Hat Local Security Checks	2008/6/12	2021/1/14	critical
33752	Slackware 12.0 / 12.1 / current : net-snmp (SSA:2008-210-07)	Nessus	Slackware Local Security Checks	2008/7/29	2021/1/14	critical
34720	Debian DSA-1663-1 : net-snmp - several vulnerabilities	Nessus	Debian Local Security Checks	2008/11/9	2021/1/4	critical
40384	VMSA-2008-0017 : Updated ESX packages for libxml2, ucd-snmp, libtiff	Nessus	VMware ESX Local Security Checks	2009/7/27	2021/1/6	critical
41223	SuSE9 Security Update : net-snmp (YOU Patch Number 12204)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	critical
33157	RHEL 4 / 5 : net-snmp (RHSA-2008:0529)	Nessus	Red Hat Local Security Checks	2008/6/12	2024/4/24	critical
33281	Mac OS X 10.5.x < 10.5.4 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2008/7/1	2024/5/28	critical
33832	GLSA-200808-02 : Net-SNMP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2008/8/7	2021/1/6	critical
40045	openSUSE Security Update : libsnmp15 (libsnmp15-87)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	critical
33282	Mac OS X Multiple Vulnerabilities (Security Update 2008-004)	Nessus	MacOS X Local Security Checks	2008/7/1	2024/5/28	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical