ID de Prueba:	1.3.6.1.4.1.25623.1.0.64456
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2009:156 (net-snmp)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to net-snmp announced via advisory MDVSA-2009:156. A vulnerability has been found and corrected in net-snmp: agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309 (CVE-2009-1887). This update provides fixes for this vulnerability. Affected: Corporate 3.0, Multi Network Firewall 2.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2009:156 CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4309 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html BugTraq ID: 32020 http://www.securityfocus.com/bid/32020 Bugtraq: 20081112 rPSA-2008-0315-1 net-snmp net-snmp-client net-snmp-server net-snmp-utils (Google Search) http://www.securityfocus.com/archive/1/498280/100/0/threaded Cert/CC Advisory: TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html Debian Security Information: DSA-1663 (Google Search) http://www.debian.org/security/2008/dsa-1663 http://security.gentoo.org/glsa/glsa-200901-15.xml HPdes Security Advisory: HPSBMA02447 http://marc.info/?l=bugtraq&m=125017764422557&w=2 HPdes Security Advisory: SSRT090062 http://www.mandriva.com/security/advisories?name=MDVSA-2008:225 http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/tags/Ext-5-2-5-1/net-snmp/agent/snmp_agent.c?r1=17271&r2=17272&pathrev=17272 http://www.openwall.com/lists/oss-security/2008/10/31/1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6171 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6353 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9860 http://www.redhat.com/support/errata/RHSA-2008-0971.html http://www.securitytracker.com/id?1021129 http://secunia.com/advisories/32539 http://secunia.com/advisories/32560 http://secunia.com/advisories/32664 http://secunia.com/advisories/32711 http://secunia.com/advisories/33003 http://secunia.com/advisories/33095 http://secunia.com/advisories/33631 http://secunia.com/advisories/33746 http://secunia.com/advisories/33821 http://secunia.com/advisories/35074 http://secunia.com/advisories/35679 http://sunsolve.sun.com/search/document.do?assetkey=1-26-262908-1 SuSE Security Announcement: SUSE-SR:2009:003 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html http://www.ubuntu.com/usn/usn-685-1 http://www.vupen.com/english/advisories/2008/2973 http://www.vupen.com/english/advisories/2008/3400 http://www.vupen.com/english/advisories/2009/0301 http://www.vupen.com/english/advisories/2009/1297 http://www.vupen.com/english/advisories/2009/1771 XForce ISS Database: netsnmp-netsnmpcreatesubtreecache-dos(46262) https://exchange.xforce.ibmcloud.com/vulnerabilities/46262 Common Vulnerability Exposure (CVE) ID: CVE-2009-1887 http://www.mandriva.com/security/advisories?name=MDVSA-2009:156 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8426 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9716 http://www.redhat.com/support/errata/RHSA-2009-1124.html
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.