Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Debian Security Advisory DSA 111-1 (ucd-snmp)
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
The remote host is missing an update to ucd-snmp announced via advisory DSA 111-1.
Insight
Insight
The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploits. New UCD-SNMP packages have been prepared to fix these problems as well as a few others. The complete list of fixed problems is: * When running external programs snmpd used temporary files insecurely * snmpd did not properly reset supplementary groups after changing its uid and gid * Modified most code to use buffers instead of fixed-length strings to prevent buffer overflows * The ASN.1 parser did not check for negative lengths * the IFINDEX response handling in snmpnetstat did not do a sanity check on its input (thanks to Caldera for most of the work on those patches) The new version is 4.1.1-2.1 and we recommend you upgrade your snmp packages immediately.
Solution
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20111-1