- Tue Jun 10 2008 Jan Safranek <jsafranek at redhat.com>     5.4.1-7

    - fix various flaws (CVE-2008-2292 CVE-2008-0960)

    - Thu Feb 14 2008 Jan Safranek <jsafranek at redhat.com>       5.4.1-6

    - fixing ipNetToMediaNetAddress to show IP address       (#432780)

    - Thu Nov 15 2007 Jan Safranek <jsafranek at redhat.com>       5.4.1-5

    - added procps to build dependencies (#380321)

    - fix crash on reading xen interfaces (#386611)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

s700_800 11.X OV EMANATE15.3 IA-64 Consolidated Patch 6 : 

A potential vulnerability has been identified with HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows.
The vulnerability could be exploited remotely to gain unauthorized access.

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0529 advisory.

  - net-snmp SNMPv3 authentication bypass (VU#877044) (CVE-2008-0960)

  - net-snmp: buffer overflow in perl module's Perl Module __snprint_value() (CVE-2008-2292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Wes Hardaker discovered that the SNMP service did not correctly validate HMAC authentication requests. An unauthenticated remote attacker could send specially crafted SNMPv3 traffic with a valid username and gain access to the user's views without a valid authentication passphrase. (CVE-2008-0960)

John Kortink discovered that the Net-SNMP Perl module did not correctly check the size of returned values. If a user or automated system were tricked into querying a malicious SNMP server, the application using the Perl module could be made to crash, leading to a denial of service. This did not affect Ubuntu 8.10. (CVE-2008-2292)

It was discovered that the SNMP service did not correctly handle large GETBULK requests. If an unauthenticated remote attacker sent a specially crafted request, the SNMP service could be made to crash, leading to a denial of service. (CVE-2008-4309).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This security update fixes a denial of service vulnerability and an authentication bypass (CVE-2008-2292, CVE-2008-0960).

The remote host is affected by the vulnerability described in GLSA-200808-02 (Net-SNMP: Multiple vulnerabilities)

    Wes Hardaker reported that the SNMPv3 HMAC verification relies on the     client to specify the HMAC length (CVE-2008-0960). John Kortink     reported a buffer overflow in the Perl bindings of Net-SNMP when     processing the OCTETSTRING in an attribute value pair (AVP) received by     an SNMP agent (CVE-2008-2292).
  Impact :

    An attacker could send SNMPv3 packets to an instance of snmpd providing     a valid user name and an HMAC length value of 1, and easily conduct     brute-force attacks to bypass SNMP authentication. An attacker could     further entice a user to connect to a malicious SNMP agent with an SNMP     client using the Perl bindings, possibly resulting in the execution of     arbitrary code.
  Workaround :

    There is no known workaround at this time.

I Security Issues

  a. OpenSSL Binaries Updated

  This fix updates the third-party OpenSSL library.

  The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the names CVE-2007-3108 and CVE-2007-5135 to the issues   addressed by this update.

II Service Console rpm updates

  a. net-snmp Security update

  This fix upgrades the service console rpm for net-snmp to version   net-snmp-5.0.9-2.30E.24.
   Note: this update is relevant for ESX 3.0.3. The initial advisory   incorrectly stated that this update was present in ESX 3.0.3   when it was released on August 8, 2008.

  The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the names CVE-2008-2292 and CVE-2008-0960 to the issues   addressed in net-snmp-5.0.9-2.30E.24.

  b. perl Security update

  This fix upgrades the service console rpm for perl to version   perl-5.8.0-98.EL3.

  Note: this update is relevant for ESX 3.0.3. The initial advisory   incorrectly stated that this update was present in ESX 3.0.3   when it was released on August 8, 2008.

  The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the name CVE-2008-1927 to the issue addressed in   perl-5.8.0-98.EL3.

SNMPv3 HMAC verification relies on the client to specify the HMAC length.  This makes it possible for remote attackers to bypass SNMP authentication via repeated attempts with a HMAC length value of 1, which causes only the first byte of the authentication hash to be checked. 

This issue affects SNMP implementations from multiple vendors.

Multiple Cisco products contain either of two authentication vulnerabilities in the Simple Network Management Protocol version 3 (SNMPv3) feature. These vulnerabilities can be exploited when processing a malformed SNMPv3 message. These vulnerabilities could allow the disclosure of network information or may enable an attacker to perform configuration changes to vulnerable devices. The SNMP server is an optional service that is disabled by default in Cisco products. Only SNMPv3 is impacted by these vulnerabilities.
Workarounds are available for mitigating the impact of the vulnerabilities described in this document. Note: SNMP versions 1, 2 and 2c are not impacted by these vulnerabilities. The United States Computer Emergency Response Team (US-CERT) has assigned Vulnerability Note VU#878044.

SNMPv3 HMAC verification relies on the client to specify the HMAC length. This flexibility allows remote attackers to bypass SNMP authentication by specifying a length value of 1 , which only checks the first byte.

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The Simple Network Management Protocol (SNMP) is a protocol used for network management.

A flaw was found in the way Net-SNMP checked an SNMPv3 packet's Keyed-Hash Message Authentication Code (HMAC). An attacker could use this flaw to spoof an authenticated SNMPv3 packet. (CVE-2008-0960)

A buffer overflow was found in the Perl bindings for Net-SNMP. This could be exploited if an attacker could convince an application using the Net-SNMP Perl module to connect to a malicious SNMP agent.
(CVE-2008-2292)

All users of net-snmp should upgrade to these updated packages, which contain backported patches to resolve these issues.

New net-snmp packages are available for Slackware 12.0, 12.1, and
-current to fix security issues.

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.4.  Mac OS X 10.5.4 contains security fixes for a number of programs.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
33147	Fedora 8 : net-snmp-5.4.1-7.fc8 (2008-5218)	Nessus	Fedora Local Security Checks	2008/6/12	2021/1/11	critical
47754	HP-UX PHSS_39887 : HP OpenView SNMP Emanate Master Agent Remote Unauthorized Access (HPSBMA02439 SSRT080082 rev.3)	Nessus	HP-UX Local Security Checks	2010/7/19	2021/1/11	critical
33157	RHEL 4 / 5 : net-snmp (RHSA-2008:0529)	Nessus	Red Hat Local Security Checks	2008/6/12	2024/4/24	critical
38099	Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : net-snmp vulnerabilities (USN-685-1)	Nessus	Ubuntu Local Security Checks	2009/4/23	2021/1/19	critical
40045	openSUSE Security Update : libsnmp15 (libsnmp15-87)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	critical
33832	GLSA-200808-02 : Net-SNMP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2008/8/7	2021/1/6	critical
40381	VMSA-2008-0013 : Updated ESX packages for OpenSSL, net-snmp, perl	Nessus	VMware ESX Local Security Checks	2009/7/27	2021/1/6	critical
40449	Multiple Vendor HMAC Authentication SNMPv3 Authentication Bypass	Nessus	SNMP	2009/7/31	2022/2/28	critical
66697	SNMP Version 3 Authentication Bypass Vulnerabilities (cisco-sa-20080610-snmpv3)	Nessus	CISCO	2013/5/31	2019/10/29	critical
78225	F5 Networks BIG-IP : SNMPv3 HMAC verification vulnerability (SOL8939)	Nessus	F5 Networks Local Security Checks	2014/10/10	2021/1/11	critical
33142	CentOS 3 / 4 / 5 : net-snmp (CESA-2008:0529)	Nessus	CentOS Local Security Checks	2008/6/12	2021/1/4	critical
33752	Slackware 12.0 / 12.1 / current : net-snmp (SSA:2008-210-07)	Nessus	Slackware Local Security Checks	2008/7/29	2021/1/14	critical
4564	Mac OS X < 10.5.4 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2004/8/18	2019/3/6	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical