PT-2005-3688 · Net Snmp · Net-Snmp

James Cloos · Published 2005-09-07 · Updated 2008-09-05 · CVE-2005-2811

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Net-SNMP versions 5.2.1.2 and earlier

Description The issue concerns an untrusted search path vulnerability. It affects the installation of certain Perl modules with an insecure DT RPATH, potentially allowing local users to gain privileges.

Recommendations For Net-SNMP versions 5.2.1.2 and earlier, consider updating to a newer version that addresses the insecure DT RPATH issue to prevent local users from gaining privileges.

Fix

Related Identifiers

CVE-2005-2811

Affected Products

Net-Snmp

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-2811 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200509-05.xml · Vendor Advisory