RHEL 4 : net-snmp (RHSA-2005:395)

high Nessus Plugin ID 19988

Synopsis

The remote Red Hat host is missing one or more security updates for net-snmp.

Description

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:395 advisory.

SNMP (Simple Network Management Protocol) is a protocol used for network management.

A denial of service bug was found in the way net-snmp uses network stream protocols. It is possible for a remote attacker to send a net-snmp agent a specially crafted packet that will crash the agent. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-2177 to this issue.

An insecure temporary file usage bug was found in net-snmp's fixproc command. It is possible for a local user to modify the content of temporary files used by fixproc that can lead to arbitrary command execution. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-1740 to this issue.

Additionally, the following bugs have been fixed:
- The lmSensors are correctly recognized, snmp deamon no longer segfaults
- The larger swap partition sizes are correctly reported
- Querying hrSWInstalledLastUpdateTime no longer crashes the snmp deamon
- Fixed error building ASN.1 representation
- The 64-bit network counters correctly wrap
- Large file systems are correctly handled
- Snmptrapd initscript correctly reads options from its configuration file /etc/snmp/snmptrapd.options
- Snmp deamon no longer crashes when restarted using the agentX protocol
- snmp daemon now reports gigabit Ethernet speeds correctly
- MAC adresses are shown when requested instead of IP adresses

All users of net-snmp should upgrade to these updated packages, which resolve these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the RHEL net-snmp package based on the guidance in RHSA-2005:395.

Plugin Details

Severity: High

ID: 19988

File Name: redhat-RHSA-2005-395.nasl

Version: 1.28

Type: local

Agent: unix

Family: Red Hat Local Security Checks

Published: 10/11/2005

Updated: 11/4/2024

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

Vendor

Vendor Severity: Low

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2005-4837

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS Score Source: CVE-2005-2177

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:net-snmp-perl, p-cpe:/a:redhat:enterprise_linux:net-snmp-devel, p-cpe:/a:redhat:enterprise_linux:net-snmp-utils, cpe:/o:redhat:enterprise_linux:4, p-cpe:/a:redhat:enterprise_linux:net-snmp-libs, p-cpe:/a:redhat:enterprise_linux:net-snmp

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: No exploit is required

Patch Publication Date: 10/5/2005

Vulnerability Publication Date: 5/24/2005

Reference Information

CVE: CVE-2005-1740, CVE-2005-2177, CVE-2005-4837

BID: 13715

RHSA: 2005:395

Detections

Analytics