agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309.

From Red Hat Security Advisory 2009:1124 :

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The Simple Network Management Protocol (SNMP) is a protocol used for network management.

A divide-by-zero flaw was discovered in the snmpd daemon. A remote attacker could issue a specially crafted GETBULK request that could crash the snmpd daemon. (CVE-2009-1887)

Note: An attacker must have read access to the SNMP server in order to exploit this flaw. In the default configuration, the community name 'public' grants read-only access. In production deployments, it is recommended to change this default community name.

All net-snmp users should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the snmpd and snmptrapd daemons will be restarted automatically.

A divide-by-zero flaw was discovered in the snmpd daemon. A remote attacker could issue a specially crafted GETBULK request that could crash the snmpd daemon. (CVE-2009-1887)

Note: An attacker must have read access to the SNMP server in order to exploit this flaw. In the default configuration, the community name 'public' grants read-only access. In production deployments, it is recommended to change this default community name.

After installing the update, the snmpd and snmptrapd daemons will be restarted automatically.

a. Service Console package net-snmp updated

   This patch updates the service console package for net-snmp,    net-snmp-utils, and net-snmp-libs to version    net-snmp-5.0.9-2.30E.28. This net-snmp update fixes a divide-by-    zero flaw in the snmpd daemon. A remote attacker could issue a    specially crafted GETBULK request that could cause the snmpd daemon    to fail.

   This vulnerability was introduced by an incorrect fix for    CVE-2008-4309.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org) has    assigned the name CVE-2009-1887 to this issue.

   Note: After installing the previous patch for net-snmp    (ESX350-200901409-SG), running the snmpbulkwalk command with the    parameter -CnX results in no output, and the snmpd daemon stops.

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The Simple Network Management Protocol (SNMP) is a protocol used for network management.

A divide-by-zero flaw was discovered in the snmpd daemon. A remote attacker could issue a specially crafted GETBULK request that could crash the snmpd daemon. (CVE-2009-1887)

Note: An attacker must have read access to the SNMP server in order to exploit this flaw. In the default configuration, the community name 'public' grants read-only access. In production deployments, it is recommended to change this default community name.

All net-snmp users should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the snmpd and snmptrapd daemons will be restarted automatically.

ID	Name	Product	Family	Severity
67880	Oracle Linux 3 : net-snmp (ELSA-2009-1124)	Nessus	Oracle Linux Local Security Checks	medium
60607	Scientific Linux Security Update : net-snmp on SL3.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
44642	VMSA-2010-0003 : ESX Service Console update for net-snmp	Nessus	VMware ESX Local Security Checks	medium
39527	RHEL 3 : net-snmp (RHSA-2009:1124)	Nessus	Red Hat Local Security Checks	medium
39523	CentOS 3 : net-snmp (CESA-2009:1124)	Nessus	CentOS Local Security Checks	medium

Detections

Analytics

CVE-2009-1887

high

Tenable Plugins

medium

medium

medium

medium

medium