PT-2005-5498 · Net Snmp+1 · Net-Snmp+1

Published 2005-09-28 · Updated 2017-10-11 · CVE-2005-4837

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Net-SNMP versions 5.0.x through 5.0.10.1 Net-SNMP versions 5.1.x through 5.1.2 Net-SNMP versions 5.2.x through 5.2.1

Description The issue allows remote attackers to cause a denial of service by triggering a crash when a particular TCP disconnect occurs, leading to the freeing of an incorrect variable.

Recommendations For Net-SNMP versions 5.0.x through 5.0.10.1, update to version 5.0.10.2 or later. For Net-SNMP versions 5.1.x through 5.1.2, update to version 5.1.3 or later. For Net-SNMP versions 5.2.x through 5.2.1, update to version 5.2.2 or later.

Exploit

Fix

DoS

Weakness Enumeration

CWE-189

CWE-16

Related Identifiers

CVE-2005-4837

RHSA-2005:373

RHSA-2005:395

RHSA-2005_373

RHSA-2005_395

Affected Products

Net-Snmp

Red Hat

References · 21

• 🔥 http://sourceforge.net/tracker/index.php?func=detail&aid=1207023&group_id=12694&atid=112694 · Exploit
• http://vupen.com/english/advisories/2007/1944 · Vendor Advisory
• http://secunia.com/advisories/25411 · Vendor Advisory
• http://secunia.com/advisories/25114 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02660 · Security Note
• http://ubuntu.com/usn/USN-456-1 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102929-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-4837 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-4837 · Vendor Advisory
• http://secunia.com/advisories/25115 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4837 · Security Note
• https://bdu.fstec.ru/vul/2015-02659 · Security Note
• https://osv.dev/vulnerability/CVE-2005-4837 · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-1740.html · Note
• https://redhat.com/security/data/cve/CVE-2005-2177.html · Note