PT-2005-5576 · Net Snmp+1 · Net-Snmp+1

Publicado

1970-01-01

·

Atualizado

2018-10-19

·

CVE-2005-2177

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Net-SNMP versions 5.0.x through 5.0.10.1 Net-SNMP versions 5.2.x through 5.2.1.1 Net-SNMP version 5.1.3
Description The issue allows remote attackers to cause a denial of service, resulting in daemon hang and CPU consumption. This can be triggered via a TCP packet of length 1, which causes an infinite loop. The vulnerability can be exploited remotely, potentially leading to disruption of protected information.
Recommendations For Net-SNMP versions 5.0.x through 5.0.10.1, update to version 5.0.10.2 or later. For Net-SNMP versions 5.2.x through 5.2.1.1, update to version 5.2.1.2 or later. For Net-SNMP version 5.1.3, consider upgrading to a newer version, such as 5.0.10.2 or 5.2.1.2, to resolve the issue.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2015-02659
BDU:2015-02660
CVE-2005-2177
DSA-873-1
RHSA-2005:373
RHSA-2005:395
RHSA-2005_373
RHSA-2005_395

Produtos afetados

Net-Snmp
Red Hat