PT-2006-6932 · Net Snmp · Net-Snmp

Published 2006-12-06 · Updated 2017-07-29 · CVE-2006-6305

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Net-SNMP versions 5.3 through 5.3.0.1

Description The issue allows Net-SNMP to grant write access to users or communities that only have read-only access when configured using the rocommunity or rouser snmpd.conf tokens.

Recommendations For versions 5.3 through 5.3.0.1, update to version 5.3.0.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-6305

Affected Products

Net-Snmp

References · 8

• http://secunia.com/advisories/23285 · Vendor Advisory
• http://sourceforge.net/forum/forum.php?forum_id=531399 · Patch
• http://net-snmp.sourceforge.net/about/news.html · Patch
• http://net-snmp.sourceforge.net/about/ChangeLog.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-6305 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30782 · Note
• http://securitytracker.com/id?1017355 · Note
• http://securityfocus.com/bid/21503 · Note