Test Kennung:	1.3.6.1.4.1.25623.1.0.61873
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: net-snmp
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: net-snmp net-snmp53 CVE-2008-4309 Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow, related to the number of responses or repeats. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4309 1021129 http://www.securitytracker.com/id?1021129 20081112 rPSA-2008-0315-1 net-snmp net-snmp-client net-snmp-server net-snmp-utils http://www.securityfocus.com/archive/1/498280/100/0/threaded 262908 http://sunsolve.sun.com/search/document.do?assetkey=1-26-262908-1 32020 http://www.securityfocus.com/bid/32020 32539 http://secunia.com/advisories/32539 32560 http://secunia.com/advisories/32560 32664 http://secunia.com/advisories/32664 32711 http://secunia.com/advisories/32711 33003 http://secunia.com/advisories/33003 33095 http://secunia.com/advisories/33095 33631 http://secunia.com/advisories/33631 33746 http://secunia.com/advisories/33746 33821 http://secunia.com/advisories/33821 35074 http://secunia.com/advisories/35074 35679 http://secunia.com/advisories/35679 ADV-2008-2973 http://www.vupen.com/english/advisories/2008/2973 ADV-2008-3400 http://www.vupen.com/english/advisories/2008/3400 ADV-2009-0301 http://www.vupen.com/english/advisories/2009/0301 ADV-2009-1297 http://www.vupen.com/english/advisories/2009/1297 ADV-2009-1771 http://www.vupen.com/english/advisories/2009/1771 APPLE-SA-2009-05-12 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html APPLE-SA-2010-12-16-1 http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html DSA-1663 http://www.debian.org/security/2008/dsa-1663 GLSA-200901-15 http://security.gentoo.org/glsa/glsa-200901-15.xml HPSBMA02447 http://marc.info/?l=bugtraq&m=125017764422557&w=2 MDVSA-2008:225 http://www.mandriva.com/security/advisories?name=MDVSA-2008:225 RHSA-2008:0971 http://www.redhat.com/support/errata/RHSA-2008-0971.html SSRT090062 SUSE-SR:2009:003 http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html USN-685-1 http://www.ubuntu.com/usn/usn-685-1 [oss-security] 20081031 New net-snmp DoS http://www.openwall.com/lists/oss-security/2008/10/31/1 http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/tags/Ext-5-2-5-1/net-snmp/agent/snmp_agent.c?r1=17271&r2=17272&pathrev=17272 http://sourceforge.net/forum/forum.php?forum_id=882903 http://support.apple.com/kb/HT3549 http://support.apple.com/kb/HT4298 http://support.avaya.com/elmodocs2/security/ASA-2008-467.htm http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0315 http://www.vmware.com/security/advisories/VMSA-2009-0001.html netsnmp-netsnmpcreatesubtreecache-dos(46262) https://exchange.xforce.ibmcloud.com/vulnerabilities/46262 oval:org.mitre.oval:def:6171 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6171 oval:org.mitre.oval:def:6353 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6353 oval:org.mitre.oval:def:9860 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9860
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.