ID de Prueba:	1.3.6.1.4.1.25623.1.0.882249
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for net-snmp CESA-2015:1636 centos7
Resumen:	Check the version of net-snmp
Descripción:	Summary: Check the version of net-snmp Vulnerability Insight: The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. It was discovered that the snmp_pdu_parse() function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could use this flaw to crash snmpd or, potentially, execute arbitrary code on the system with the privileges of the user running snmpd. (CVE-2015-5621) Red Hat would like to thank Qinghao Tang of QIHU 360 company, China for reporting this issue. All net-snmp users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. Affected Software/OS: net-snmp on CentOS 7 Solution: Please install the updated packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5621 BugTraq ID: 76380 http://www.securityfocus.com/bid/76380 Debian Security Information: DSA-4154 (Google Search) https://www.debian.org/security/2018/dsa-4154 https://www.exploit-db.com/exploits/45547/ http://www.openwall.com/lists/oss-security/2015/04/13/1 http://www.openwall.com/lists/oss-security/2015/04/16/15 http://www.openwall.com/lists/oss-security/2015/07/31/1 RedHat Security Advisories: RHSA-2015:1636 http://rhn.redhat.com/errata/RHSA-2015-1636.html http://www.securitytracker.com/id/1033304 SuSE Security Announcement: openSUSE-SU-2015:1502 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-09/msg00004.html http://www.ubuntu.com/usn/USN-2711-1
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.