PT-2006-6932 · Net Snmp · Net-Snmp

Publicado 2006-12-06 · Atualizado 2017-07-29 · CVE-2006-6305

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Net-SNMP versions 5.3 through 5.3.0.1

Description The issue allows Net-SNMP to grant write access to users or communities that only have read-only access when configured using the rocommunity or rouser snmpd.conf tokens.

Recommendations For versions 5.3 through 5.3.0.1, update to version 5.3.0.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-6305

Produtos afetados

Net-Snmp

Referências · 8

• http://secunia.com/advisories/23285 · Aviso do Fabricante
• http://sourceforge.net/forum/forum.php?forum_id=531399 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30782 · Nota
• http://net-snmp.sourceforge.net/about/news.html · Correção
• http://securitytracker.com/id?1017355 · Nota
• http://net-snmp.sourceforge.net/about/ChangeLog.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-6305 · Nota de Segurança
• http://securityfocus.com/bid/21503 · Nota