Net-SNMP Perl Module Buffer Overflow Vulnerability

Bugtraq ID:	29212
Class:	Boundary Condition Error
CVE:	CVE-2008-2292
Remote:	Yes
Local:	No
Published:	May 10 2008 12:00AM
Updated:	May 07 2015 05:13PM
Credit:	John Kortink
Vulnerable:	VMWare ESX Server 3.0.2 VMWare ESX Server 3.0.1 VMWare ESX Server 3.5 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE SUSE Linux Enterprise SDK 10 SP2 SuSE Suse Linux Enterprise Desktop 10 SP2 SuSE Suse Linux Enterprise Desktop 10 SP1 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun OpenSolaris 0 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux -current S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 Redhat Fedora 7 Redhat Enterprise Linux WS 5 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Redhat Desktop 4.0 Redhat Desktop 3.0 Redhat Application Server WS 3 Redhat Application Server ES 3 Redhat Application Server AS 3 Net-SNMP Net-SNMP 5.4.1 Net-SNMP Net-SNMP 5.2.4 Net-SNMP Net-SNMP 5.1.4 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 4.0 Avaya Messaging Storage Server 3.1 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server Avaya Message Networking MN 3.1 Avaya Message Networking 3.1 Avaya Message Networking Avaya Intuity Audix R5 0 Avaya Intuity AUDIX LX 2.0 Avaya Intuity AUDIX Avaya EMMC 1.021 Avaya EMMC 1.017 Avaya Communication Manager 5.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 4.0 Avaya Communication Manager 3.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 3.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 + Avaya Communication Manager Server S8700 Avaya Aura SIP Enablement Services 3.1.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura Application Enablement Services 3.1.5 Avaya Aura Application Enablement Services 4.2
Not Vulnerable:

Net-SNMP Perl Module Buffer Overflow Vulnerability

Net-SNMP is prone a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer.

Exploiting this issue may allow attackers to execute arbitrary machine code in the context of applications using the affected Net-SNMP Perl module. Failed exploit attempts will likely cause denial-of-service conditions.

This issue affects Net-SNMP 5.4.1, 5.2.4, and 5.1.4; other versions may also be vulnerable.

Net-SNMP Perl Module Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

The following proof-of-concept code is available:

• /data/vulnerabilities/exploits/29212.pl

Net-SNMP Perl Module Buffer Overflow Vulnerability

Solution:
The vendor fixed this issue in the SVN repository. The issue was also fixed in the 5.4.2 pre1 version, but note that this is a prerelease version. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu libsnmp-base_5.3.1-6ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 3.1-6ubuntu2.2_all.deb


• Ubuntu libsnmp-dev_5.3.1-6ubuntu2.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-dev_5.3 .1-6ubuntu2.2_powerpc.deb


• Ubuntu libsnmp-perl_5.3.1-6ubuntu2.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 3.1-6ubuntu2.2_powerpc.deb


• Ubuntu libsnmp10_5.3.1-6ubuntu2.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp10_5.3.1 -6ubuntu2.2_powerpc.deb


• Ubuntu snmp_5.3.1-6ubuntu2.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.3.1-6ubu ntu2.2_powerpc.deb


• Ubuntu snmpd_5.3.1-6ubuntu2.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.3.1-6ub untu2.2_powerpc.deb


• Ubuntu tkmib_5.3.1-6ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.3.1 -6ubuntu2.2_all.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu libsnmp-base_5.4.1~dfsg-4ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 4.1~dfsg-4ubuntu4.2_all.deb


• Ubuntu libsnmp-dev_5.4.1~dfsg-4ubuntu4.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-dev_5.4.1~dfsg-4u buntu4.2_powerpc.deb


• Ubuntu libsnmp-perl_5.4.1~dfsg-4ubuntu4.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-perl_5.4.1~dfsg-4 ubuntu4.2_powerpc.deb


• Ubuntu libsnmp-python_5.4.1~dfsg-4ubuntu4.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/n/net-snmp/libsnmp-python_5.4.1~ dfsg-4ubuntu4.2_powerpc.deb


• Ubuntu libsnmp15_5.4.1~dfsg-4ubuntu4.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp15_5.4.1~dfsg-4ubu ntu4.2_powerpc.deb


• Ubuntu snmp_5.4.1~dfsg-4ubuntu4.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmp_5.4.1~dfsg-4ubuntu4. 2_powerpc.deb


• Ubuntu snmpd_5.4.1~dfsg-4ubuntu4.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmpd_5.4.1~dfsg-4ubuntu4 .2_powerpc.deb


• Ubuntu tkmib_5.4.1~dfsg-4ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.4.1 ~dfsg-4ubuntu4.2_all.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu libsnmp-base_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 4.1~dfsg-7.1ubuntu6.1_all.deb


• Ubuntu libsnmp-dev_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-dev_5.4.1~dfsg-7. 1ubuntu6.1_powerpc.deb


• Ubuntu libsnmp-perl_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-perl_5.4.1~dfsg-7 .1ubuntu6.1_powerpc.deb


• Ubuntu libsnmp-python_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/n/net-snmp/libsnmp-python_5.4.1~ dfsg-7.1ubuntu6.1_powerpc.deb


• Ubuntu libsnmp15_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp15_5.4.1~dfsg-7.1u buntu6.1_powerpc.deb


• Ubuntu snmp_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmp_5.4.1~dfsg-7.1ubuntu 6.1_powerpc.deb


• Ubuntu snmpd_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmpd_5.4.1~dfsg-7.1ubunt u6.1_powerpc.deb


• Ubuntu tkmib_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.4.1 ~dfsg-7.1ubuntu6.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu libsnmp-base_5.4.1~dfsg-4ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 4.1~dfsg-4ubuntu4.2_all.deb


• Ubuntu libsnmp-dev_5.4.1~dfsg-4ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-dev_5.4.1~dfsg-4u buntu4.2_sparc.deb


• Ubuntu libsnmp-perl_5.4.1~dfsg-4ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-perl_5.4.1~dfsg-4 ubuntu4.2_sparc.deb


• Ubuntu libsnmp-python_5.4.1~dfsg-4ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/universe/n/net-snmp/libsnmp-python_5.4.1~ dfsg-4ubuntu4.2_sparc.deb


• Ubuntu libsnmp15_5.4.1~dfsg-4ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp15_5.4.1~dfsg-4ubu ntu4.2_sparc.deb


• Ubuntu snmp_5.4.1~dfsg-4ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmp_5.4.1~dfsg-4ubuntu4. 2_sparc.deb


• Ubuntu snmpd_5.4.1~dfsg-4ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmpd_5.4.1~dfsg-4ubuntu4 .2_sparc.deb


• Ubuntu tkmib_5.4.1~dfsg-4ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.4.1 ~dfsg-4ubuntu4.2_all.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu libsnmp-base_5.2.1.2-4ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 2.1.2-4ubuntu2.3_all.deb


• Ubuntu libsnmp-perl_5.2.1.2-4ubuntu2.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 2.1.2-4ubuntu2.3_sparc.deb


• Ubuntu libsnmp9-dev_5.2.1.2-4ubuntu2.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9-dev_5. 2.1.2-4ubuntu2.3_sparc.deb


• Ubuntu libsnmp9_5.2.1.2-4ubuntu2.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9_5.2.1. 2-4ubuntu2.3_sparc.deb


• Ubuntu snmp_5.2.1.2-4ubuntu2.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.2.1.2-4u buntu2.3_sparc.deb


• Ubuntu snmpd_5.2.1.2-4ubuntu2.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.2.1.2-4 ubuntu2.3_sparc.deb


• Ubuntu tkmib_5.2.1.2-4ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.2.1 .2-4ubuntu2.3_all.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu libsnmp-base_5.4.1~dfsg-4ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 4.1~dfsg-4ubuntu4.2_all.deb


• Ubuntu libsnmp-dev_5.4.1~dfsg-4ubuntu4.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-dev_5.4 .1~dfsg-4ubuntu4.2_amd64.deb


• Ubuntu libsnmp-perl_5.4.1~dfsg-4ubuntu4.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 4.1~dfsg-4ubuntu4.2_amd64.deb


• Ubuntu libsnmp-python_5.4.1~dfsg-4ubuntu4.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/libsnmp-pyt hon_5.4.1~dfsg-4ubuntu4.2_amd64.deb


• Ubuntu libsnmp15_5.4.1~dfsg-4ubuntu4.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp15_5.4.1 ~dfsg-4ubuntu4.2_amd64.deb


• Ubuntu snmp_5.4.1~dfsg-4ubuntu4.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.4.1~dfsg -4ubuntu4.2_amd64.deb


• Ubuntu snmpd_5.4.1~dfsg-4ubuntu4.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.4.1~dfs g-4ubuntu4.2_amd64.deb


• Ubuntu tkmib_5.4.1~dfsg-4ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.4.1 ~dfsg-4ubuntu4.2_all.deb

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu libsnmp-base_5.3.1-6ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 3.1-6ubuntu2.2_all.deb


• Ubuntu libsnmp-dev_5.3.1-6ubuntu2.2_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-dev_5.3 .1-6ubuntu2.2_sparc.deb


• Ubuntu libsnmp-perl_5.3.1-6ubuntu2.2_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 3.1-6ubuntu2.2_sparc.deb


• Ubuntu libsnmp10_5.3.1-6ubuntu2.2_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp10_5.3.1 -6ubuntu2.2_sparc.deb


• Ubuntu snmp_5.3.1-6ubuntu2.2_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.3.1-6ubu ntu2.2_sparc.deb


• Ubuntu snmpd_5.3.1-6ubuntu2.2_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.3.1-6ub untu2.2_sparc.deb


• Ubuntu tkmib_5.3.1-6ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.3.1 -6ubuntu2.2_all.deb

Debian Linux 4.0 amd64

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_amd64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_amd64.deb


• Debian libsnmp9-dev_5.2.3-7etch4_amd64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_amd64.deb


• Debian libsnmp9_5.2.3-7etch4_amd64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_amd64.deb


• Debian snmp_5.2.3-7etch4_amd64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_amd64.deb


• Debian snmpd_5.2.3-7etch4_amd64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_amd64.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Debian Linux 4.0 ia-32

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_i386.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_i386.deb


• Debian libsnmp9-dev_5.2.3-7etch4_i386.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_i386.deb


• Debian libsnmp9_5.2.3-7etch4_i386.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_i386.deb


• Debian snmp_5.2.3-7etch4_i386.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_i386.deb


• Debian snmpd_5.2.3-7etch4_i386.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_i386.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Debian Linux 4.0 hppa

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_hppa.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_hppa.deb


• Debian libsnmp9-dev_5.2.3-7etch4_hppa.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_hppa.deb


• Debian libsnmp9_5.2.3-7etch4_hppa.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_hppa.deb


• Debian snmp_5.2.3-7etch4_hppa.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_hppa.deb


• Debian snmpd_5.2.3-7etch4_hppa.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_hppa.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu libsnmp-base_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 4.1~dfsg-7.1ubuntu6.1_all.deb


• Ubuntu libsnmp-dev_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-dev_5.4.1~dfsg-7. 1ubuntu6.1_sparc.deb


• Ubuntu libsnmp-perl_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-perl_5.4.1~dfsg-7 .1ubuntu6.1_sparc.deb


• Ubuntu libsnmp-python_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/n/net-snmp/libsnmp-python_5.4.1~ dfsg-7.1ubuntu6.1_sparc.deb


• Ubuntu libsnmp15_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp15_5.4.1~dfsg-7.1u buntu6.1_sparc.deb


• Ubuntu snmp_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmp_5.4.1~dfsg-7.1ubuntu 6.1_sparc.deb


• Ubuntu snmpd_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmpd_5.4.1~dfsg-7.1ubunt u6.1_sparc.deb


• Ubuntu tkmib_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.4.1 ~dfsg-7.1ubuntu6.1_all.deb

Debian Linux 4.0 mipsel

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_mipsel.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_mipsel.deb


• Debian libsnmp9-dev_5.2.3-7etch4_mipsel.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_mipsel.deb


• Debian libsnmp9_5.2.3-7etch4_mipsel.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_mipsel.deb


• Debian snmp_5.2.3-7etch4_mipsel.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_mipsel.deb


• Debian snmpd_5.2.3-7etch4_mipsel.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_mipsel.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu libsnmp-base_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 4.1~dfsg-7.1ubuntu6.1_all.deb


• Ubuntu libsnmp-dev_5.4.1~dfsg-7.1ubuntu6.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-dev_5.4 .1~dfsg-7.1ubuntu6.1_amd64.deb


• Ubuntu libsnmp-perl_5.4.1~dfsg-7.1ubuntu6.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 4.1~dfsg-7.1ubuntu6.1_amd64.deb


• Ubuntu libsnmp-python_5.4.1~dfsg-7.1ubuntu6.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/libsnmp-pyt hon_5.4.1~dfsg-7.1ubuntu6.1_amd64.deb


• Ubuntu libsnmp15_5.4.1~dfsg-7.1ubuntu6.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp15_5.4.1 ~dfsg-7.1ubuntu6.1_amd64.deb


• Ubuntu snmp_5.4.1~dfsg-7.1ubuntu6.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.4.1~dfsg -7.1ubuntu6.1_amd64.deb


• Ubuntu snmpd_5.4.1~dfsg-7.1ubuntu6.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.4.1~dfs g-7.1ubuntu6.1_amd64.deb


• Ubuntu tkmib_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.4.1 ~dfsg-7.1ubuntu6.1_all.deb

Debian Linux 4.0 ia-64

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_ia64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_ia64.deb


• Debian libsnmp9-dev_5.2.3-7etch4_ia64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_ia64.deb


• Debian libsnmp9_5.2.3-7etch4_ia64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_ia64.deb


• Debian snmp_5.2.3-7etch4_ia64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_ia64.deb


• Debian snmpd_5.2.3-7etch4_ia64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_ia64.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Debian Linux 4.0 mips

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_mips.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_mips.deb


• Debian libsnmp9-dev_5.2.3-7etch4_mips.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_mips.deb


• Debian libsnmp9_5.2.3-7etch4_mips.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_mips.deb


• Debian snmp_5.2.3-7etch4_mips.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_mips.deb


• Debian snmpd_5.2.3-7etch4_mips.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_mips.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Debian Linux 4.0 arm

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_arm.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_arm.deb


• Debian libsnmp9-dev_5.2.3-7etch4_arm.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_arm.deb


• Debian libsnmp9_5.2.3-7etch4_arm.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_arm.deb


• Debian snmp_5.2.3-7etch4_arm.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_arm.deb


• Debian snmpd_5.2.3-7etch4_arm.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_arm.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Debian Linux 4.0 powerpc

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_powerpc.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_powerpc.deb


• Debian libsnmp9-dev_5.2.3-7etch4_powerpc.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_powerpc.deb


• Debian libsnmp9_5.2.3-7etch4_powerpc.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_powerpc.deb


• Debian snmp_5.2.3-7etch4_powerpc.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_powerpc.deb


• Debian snmpd_5.2.3-7etch4_powerpc.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_powerpc.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu libsnmp-base_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 4.1~dfsg-7.1ubuntu6.1_all.deb


• Ubuntu libsnmp-dev_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-dev_5.4 .1~dfsg-7.1ubuntu6.1_i386.deb


• Ubuntu libsnmp-perl_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 4.1~dfsg-7.1ubuntu6.1_i386.deb


• Ubuntu libsnmp-python_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/libsnmp-pyt hon_5.4.1~dfsg-7.1ubuntu6.1_i386.deb


• Ubuntu libsnmp15_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp15_5.4.1 ~dfsg-7.1ubuntu6.1_i386.deb


• Ubuntu snmp_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.4.1~dfsg -7.1ubuntu6.1_i386.deb


• Ubuntu snmpd_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.4.1~dfs g-7.1ubuntu6.1_i386.deb


• Ubuntu tkmib_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.4.1 ~dfsg-7.1ubuntu6.1_all.deb

Debian Linux 4.0 m68k

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu libsnmp-base_5.2.1.2-4ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 2.1.2-4ubuntu2.3_all.deb


• Ubuntu libsnmp-perl_5.2.1.2-4ubuntu2.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 2.1.2-4ubuntu2.3_powerpc.deb


• Ubuntu libsnmp9-dev_5.2.1.2-4ubuntu2.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9-dev_5. 2.1.2-4ubuntu2.3_powerpc.deb


• Ubuntu libsnmp9_5.2.1.2-4ubuntu2.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9_5.2.1. 2-4ubuntu2.3_powerpc.deb


• Ubuntu snmp_5.2.1.2-4ubuntu2.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.2.1.2-4u buntu2.3_powerpc.deb


• Ubuntu snmpd_5.2.1.2-4ubuntu2.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.2.1.2-4 ubuntu2.3_powerpc.deb


• Ubuntu tkmib_5.2.1.2-4ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.2.1 .2-4ubuntu2.3_all.deb

Net-SNMP Perl Module Buffer Overflow Vulnerability

References:

• [ 1826174 ] snmp_get limits ASN1 OCTETSTRING length (Net-SNMP)
  
• Net-SNMP (Net-SNMP)
  
• VMSA-2008-0013 Updated ESX packages for OpenSSL, net-snmp, perl (VMware Security Team )
  
• ASA-2008-282 - net-snmp security update (RHSA-2008-0529) (Avaya)
  
• RHSA-2008:0529-4: net-snmp security update (Red Hat)
  
• Solution 239785: Security Vulnerability in the System Management Agent (SMA) SNM (Sun Microsystems)