Detections
Analytics
RHEL 3 / 4 / 5 : net-snmp (RHSA-2007:1045)
high Nessus Plugin ID 28248
Synopsis
The remote Red Hat host is missing one or more security updates.Description
Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5.Simple Network Management Protocol (SNMP) is a protocol used for network management.
A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect to the snmpd UDP port (161 by default) could send a malicious packet causing snmpd to crash, resulting in a denial of service. (CVE-2007-5846)
All users of net-snmp are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue.
Solution
Update the affected packages.See Also
Plugin Details
Severity: High
ID: 28248
File Name: redhat-RHSA-2007-1045.nasl
Version: 1.27
Type: local
Agent: unix
Family: Red Hat Local Security Checks
Published: 11/16/2007
Updated: 1/14/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: cpe:/o:redhat:enterprise_linux:5, p-cpe:/a:redhat:enterprise_linux:net-snmp-perl, p-cpe:/a:redhat:enterprise_linux:net-snmp-devel, p-cpe:/a:redhat:enterprise_linux:net-snmp-utils, cpe:/o:redhat:enterprise_linux:3, p-cpe:/a:redhat:enterprise_linux:net-snmp-libs, cpe:/o:redhat:enterprise_linux:4, p-cpe:/a:redhat:enterprise_linux:net-snmp, cpe:/o:redhat:enterprise_linux:5.1, cpe:/o:redhat:enterprise_linux:4.6
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Exploit Ease: No known exploits are available
Patch Publication Date: 11/15/2007
Vulnerability Publication Date: 11/6/2007
Reference Information
CVE: CVE-2007-5846
BID: 26378