PT-2005-2712 · Net Snmp+1 · Net-Snmp+1

Published 2005-05-24 · Updated 2017-10-11 · CVE-2005-1740

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Net-snmp versions 5.x before 5.2.1-r1

Description The issue allows local users to execute arbitrary commands or overwrite arbitrary files via a symlink attack due to insecure creation of temporary files by the fixproc in Net-snmp.

Recommendations For versions prior to 5.2.1-r1, update to version 5.2.1-r1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-1740

RHSA-2005:373

RHSA-2005:395

RHSA-2005_373

RHSA-2005_395

Affected Products

Net-Snmp

Red Hat

References · 23

• https://bdu.fstec.ru/vul/2015-02659 · Security Note
• http://security.gentoo.org/glsa/glsa-200505-18.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02660 · Security Note
• http://redhat.com/support/errata/RHSA-2005-373.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:025 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1740 · Security Note
• http://redhat.com/support/errata/RHSA-2005-395.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2005-373.html · Note
• http://osvdb.org/16778 · Note
• http://sourceforge.net/tracker/index.php?func=detail&aid=1207023&group_id=12694&atid=112694 · Note
• https://redhat.com/security/data/cve/CVE-2005-2177.html · Note
• http://securitytracker.com/id?1014039 · Note
• http://zataz.net/adviso/net-snmp-05182005.txt · Note
• http://secunia.com/advisories/16999 · Note
• http://vupen.com/english/advisories/2005/0598 · Note