Oval Definition:oval:com.redhat.rhsa:def:20080971
Revision Date:2008-11-03Version:639
Title:RHSA-2008:0971: net-snmp security update (Important)
Description:The Simple Network Management Protocol (SNMP) is a protocol used for network management.

  • A denial-of-service flaw was found in the way Net-SNMP processes SNMP GETBULK requests. A remote attacker who issued a specially-crafted request could cause the snmpd server to crash. (CVE-2008-4309)

    Note: An attacker must have read access to the SNMP server in order to exploit this flaw. In the default configuration, the community name "public" grants read-only access. In production deployments, it is recommended to change this default community name.

    All users of net-snmp should upgrade to these updated packages, which contain a backported patch to resolve this issue.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2008-4309
    RHSA-2008:0971
    RHSA-2008:0971-01
    RHSA-2008:0971-01
    Platform(s):Red Hat Enterprise Linux 3
    Red Hat Enterprise Linux 4
    Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 3 is installed
  • AND
  • net-snmp-libs is earlier than 0:5.0.9-2.30E.25
  • AND net-snmp-libs is signed with Red Hat master key
  • net-snmp-perl is earlier than 0:5.0.9-2.30E.25
  • AND net-snmp-perl is signed with Red Hat master key
  • net-snmp is earlier than 0:5.0.9-2.30E.25
  • AND net-snmp is signed with Red Hat master key
  • net-snmp-devel is earlier than 0:5.0.9-2.30E.25
  • AND net-snmp-devel is signed with Red Hat master key
  • net-snmp-utils is earlier than 0:5.0.9-2.30E.25
  • AND net-snmp-utils is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • net-snmp-devel is earlier than 0:5.1.2-13.el4_7.2
  • AND net-snmp-devel is signed with Red Hat master key
  • net-snmp-libs is earlier than 0:5.1.2-13.el4_7.2
  • AND net-snmp-libs is signed with Red Hat master key
  • net-snmp-perl is earlier than 0:5.1.2-13.el4_7.2
  • AND net-snmp-perl is signed with Red Hat master key
  • net-snmp is earlier than 0:5.1.2-13.el4_7.2
  • AND net-snmp is signed with Red Hat master key
  • net-snmp-utils is earlier than 0:5.1.2-13.el4_7.2
  • AND net-snmp-utils is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • net-snmp-libs is earlier than 1:5.3.1-24.el5_2.2
  • AND net-snmp-libs is signed with Red Hat redhatrelease key
  • net-snmp is earlier than 1:5.3.1-24.el5_2.2
  • AND net-snmp is signed with Red Hat redhatrelease key
  • net-snmp-devel is earlier than 1:5.3.1-24.el5_2.2
  • AND net-snmp-devel is signed with Red Hat redhatrelease key
  • net-snmp-utils is earlier than 1:5.3.1-24.el5_2.2
  • AND net-snmp-utils is signed with Red Hat redhatrelease key
  • net-snmp-perl is earlier than 1:5.3.1-24.el5_2.2
  • AND net-snmp-perl is signed with Red Hat redhatrelease key
  • Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • net-snmp is earlier than 0:5.1.2-13.el4_7.2
  • AND net-snmp is signed with Red Hat redhatrelease2 key
  • net-snmp-devel is earlier than 0:5.1.2-13.el4_7.2
  • AND net-snmp-devel is signed with Red Hat redhatrelease2 key
  • net-snmp-libs is earlier than 0:5.1.2-13.el4_7.2
  • AND net-snmp-libs is signed with Red Hat redhatrelease2 key
  • net-snmp-perl is earlier than 0:5.1.2-13.el4_7.2
  • AND net-snmp-perl is signed with Red Hat redhatrelease2 key
  • net-snmp-utils is earlier than 0:5.1.2-13.el4_7.2
  • AND net-snmp-utils is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • net-snmp is earlier than 1:5.3.1-24.el5_2.2
  • AND net-snmp is signed with Red Hat redhatrelease2 key
  • net-snmp-devel is earlier than 1:5.3.1-24.el5_2.2
  • AND net-snmp-devel is signed with Red Hat redhatrelease2 key
  • net-snmp-libs is earlier than 1:5.3.1-24.el5_2.2
  • AND net-snmp-libs is signed with Red Hat redhatrelease2 key
  • net-snmp-perl is earlier than 1:5.3.1-24.el5_2.2
  • AND net-snmp-perl is signed with Red Hat redhatrelease2 key
  • net-snmp-utils is earlier than 1:5.3.1-24.el5_2.2
  • AND net-snmp-utils is signed with Red Hat redhatrelease2 key
  • BACK