Test ID:	1.3.6.1.4.1.25623.1.0.64277
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2009:1124
Summary:	The remote host is missing updates announced in;advisory RHSA-2009:1124.;;The Simple Network Management Protocol (SNMP) is a protocol used for;network management.;;A divide-by-zero flaw was discovered in the snmpd daemon. A remote attacker;could issue a specially-crafted GETBULK request that could crash the snmpd;daemon. (CVE-2009-1887);;Note: An attacker must have read access to the SNMP server in order to;exploit this flaw. In the default configuration, the community name;public grants read-only access. In production deployments, it is;recommended to change this default community name.;;All net-snmp users should upgrade to these updated packages, which contain;a backported patch to correct this issue. After installing the update, the;snmpd and snmptrapd daemons will be restarted automatically.
Description:	Summary: The remote host is missing updates announced in advisory RHSA-2009:1124. The Simple Network Management Protocol (SNMP) is a protocol used for network management. A divide-by-zero flaw was discovered in the snmpd daemon. A remote attacker could issue a specially-crafted GETBULK request that could crash the snmpd daemon. (CVE-2009-1887) Note: An attacker must have read access to the SNMP server in order to exploit this flaw. In the default configuration, the community name public grants read-only access. In production deployments, it is recommended to change this default community name. All net-snmp users should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the snmpd and snmptrapd daemons will be restarted automatically. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1887 MDVSA-2009:156 http://www.mandriva.com/security/advisories?name=MDVSA-2009:156 RHSA-2009:1124 http://www.redhat.com/support/errata/RHSA-2009-1124.html https://bugzilla.redhat.com/show_bug.cgi?id=506903 oval:org.mitre.oval:def:8426 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8426 oval:org.mitre.oval:def:9716 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9716
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.