Detections
Analytics

Mandriva Linux Security Advisory : net-snmp (MDVSA-2008:118)

critical Nessus Plugin ID 37050

Synopsis

The remote Mandriva Linux host is missing one or more security updates.

Description

A vulnerability was found in how Net-SNMP checked an SNMPv3 packet's Keyed-Hash Message Authentication Code (HMAC). An attacker could exploit this flaw to spoof an authenticated SNMPv3 packet (CVE-2008-0960).

A buffer overflow was found in the perl bindings for Net-SNMP that could be exploited if an attacker could convince an application using the Net-SNMP perl modules to connect to a malicious SNMP agent (CVE-2008-2292).

The updated packages have been patched to prevent these issues.

Solution

Update the affected packages.

Plugin Details

Severity: Critical

ID: 37050

File Name: mandriva_MDVSA-2008-118.nasl

Version: 1.22

Type: local

Published: 4/23/2009

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:lib64net-snmp-devel, p-cpe:/a:mandriva:linux:lib64net-snmp-static-devel, p-cpe:/a:mandriva:linux:lib64net-snmp10, p-cpe:/a:mandriva:linux:lib64net-snmp10-devel, p-cpe:/a:mandriva:linux:lib64net-snmp10-static-devel, p-cpe:/a:mandriva:linux:lib64net-snmp15, p-cpe:/a:mandriva:linux:libnet-snmp-devel, p-cpe:/a:mandriva:linux:libnet-snmp-static-devel, p-cpe:/a:mandriva:linux:libnet-snmp10, p-cpe:/a:mandriva:linux:libnet-snmp10-devel, p-cpe:/a:mandriva:linux:libnet-snmp10-static-devel, p-cpe:/a:mandriva:linux:libnet-snmp15, p-cpe:/a:mandriva:linux:net-snmp, p-cpe:/a:mandriva:linux:net-snmp-mibs, p-cpe:/a:mandriva:linux:net-snmp-tkmib, p-cpe:/a:mandriva:linux:net-snmp-trapd, p-cpe:/a:mandriva:linux:net-snmp-utils, p-cpe:/a:mandriva:linux:perl-netsnmp, cpe:/o:mandriva:linux:2007.1, cpe:/o:mandriva:linux:2008.0, cpe:/o:mandriva:linux:2008.1

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 6/19/2008

Exploitable With

CANVAS (D2ExploitPack)

Reference Information

CVE: CVE-2008-0960, CVE-2008-2292

CWE: 119, 287

MDVSA: 2008:118