PT-2005-3688 · Net Snmp · Net-Snmp

James Cloos · Publicado 2005-09-07 · Atualizado 2008-09-05 · CVE-2005-2811

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Net-SNMP versions 5.2.1.2 and earlier

Description The issue concerns an untrusted search path vulnerability. It affects the installation of certain Perl modules with an insecure DT RPATH, potentially allowing local users to gain privileges.

Recommendations For Net-SNMP versions 5.2.1.2 and earlier, consider updating to a newer version that addresses the insecure DT RPATH issue to prevent local users from gaining privileges.

Correção

Identificadores relacionados

CVE-2005-2811

Produtos afetados

Net-Snmp

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-2811 · Nota de Segurança
• http://gentoo.org/security/en/glsa/glsa-200509-05.xml · Aviso do Fabricante