Net-SNMP Remote Authentication Bypass Vulnerability

Bugtraq ID:	29623
Class:	Design Error
CVE:	CVE-2008-0960
Remote:	Yes
Local:	No
Published:	Jun 10 2008 12:00AM
Updated:	Apr 13 2015 10:21PM
Credit:	CERT
Vulnerable:	VMWare ESX Server 3.0.3 VMWare ESX Server 3.0.2 VMWare ESX Server 3.0.1 VMWare ESX Server 2.5.5 patch 8 VMWare ESX Server 2.5.5 patch 6 VMWare ESX Server 2.5.5 patch 4 VMWare ESX Server 2.5.5 patch 2 VMWare ESX Server 2.5.5 VMWare ESX Server 2.5.4 Patch 5 VMWare ESX Server 2.5.4 Patch 3 VMWare ESX Server 2.5.4 patch 19 VMWare ESX Server 2.5.4 Patch 17 VMWare ESX Server 2.5.4 Patch 16 VMWare ESX Server 2.5.4 patch 15 VMWare ESX Server 2.5.4 patch 13 VMWare ESX Server 2.5.4 Patch 10 VMWare ESX Server 2.5.4 Patch 1 VMWare ESX Server 2.5.4 VMWare ESX Server 3.5 VMWare ESX Server 2.5.5 patch 5 UCD-SNMP UCD-SNMP 4.2.6 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE SUSE Linux Enterprise SDK 10 SP2 SuSE Suse Linux Enterprise Desktop 10 SP2 SuSE Suse Linux Enterprise Desktop 10 SP1 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_01 Sun OpenSolaris 0 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux -current S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 Redhat Fedora 7 Redhat Enterprise Linux WS 5 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Redhat Desktop 4.0 Redhat Desktop 3.0 Nortel Networks Switched Firewall 6600 series Nortel Networks Switched Firewall 6400 series Nortel Networks Switched Firewall 6000 series Nortel Networks Switched Firewall 5700 series Nortel Networks Switched Firewall 5600 series Nortel Networks Switched Firewall 5400 series Nortel Networks Switched Firewall 5300 series Nortel Networks Switched Firewall 5100 series Nortel Networks Switched Firewall 5000 series Net-SNMP Net-SNMP 5.4.1 Net-SNMP Net-SNMP 5.3.2 Net-SNMP Net-SNMP 5.2.4 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Juniper Session and Resource Control Appliance 2.0 Juniper Session and Resource Control Appliance 1.0.1 Juniper Session and Resource Control Appliance 1.0 Ingate SIParator 4.6.4 Ingate SIParator 4.6.1 Ingate SIParator 4.6 Ingate SIParator 4.5.2 Ingate SIParator 4.5.1 Ingate SIParator 4.4.1 Ingate SIParator 4.3.4 Ingate SIParator 4.3.3 Ingate SIParator 4.3.2 Ingate SIParator 4.3.1 Ingate SIParator 4.3 Ingate SIParator 4.2.3 Ingate SIParator 4.2.2 Ingate SIParator 4.2.1 Ingate SIParator 3.3.1 Ingate SIParator 3.2.1 Ingate SIParator 3.2 Ingate SIParator 3.1 Ingate SIParator 4.4 Ingate Firewalll 4.4 Ingate Firewall 4.6.4 Ingate Firewall 4.6.1 Ingate Firewall 4.6 Ingate Firewall 4.5.2 Ingate Firewall 4.5.1 Ingate Firewall 4.4.1 Ingate Firewall 4.3.4 Ingate Firewall 4.3.3 Ingate Firewall 4.3.2 Ingate Firewall 4.3.1 Ingate Firewall 4.3 Ingate Firewall 4.2 .3 Ingate Firewall 4.2 .2 Ingate Firewall 4.2 .1 Ingate Firewall 4.1.3 Ingate Firewall 3.3.1 Ingate Firewall 3.2.1 Ingate Firewall 3.2 Ingate Firewall 3.1 HP OpenView SNMP Emanate Master Agent 15 Gentoo Linux eCosCentric eCos 0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Cisco Wireless LAN Controller Module 0 Cisco Wireless LAN Control 5.1 Cisco Wireless LAN Control 5.0 Cisco Wireless LAN Control 4.1 Cisco Wireless LAN Control 4.0 Cisco Wireless LAN Control 3.2 Cisco Wide Area Application Services (WAAS) 4.0.19 Cisco Wide Area Application Services (WAAS) 4.0.18 Cisco Wide Area Application Services (WAAS) 4.0.17 Cisco Wide Area Application Services (WAAS) 4.0.13 Cisco Wide Area Application Services (WAAS) 4.0.9 Cisco Wide Area Application Services (WAAS) 4.0.7 Cisco Wide Area Application Services (WAAS) 0 Cisco NX-OS 0 Cisco MDS 9000 Cisco IOS XR Cisco IOS 0 Cisco CatOS Cisco Application Control Engine (ACE) Module 0 Cisco Application & Content Networking Software (ACNS) 5.5.11 Cisco Application & Content Networking Software (ACNS) 5.5.7 Cisco Application & Content Networking Software (ACNS) 5.3.3 Cisco Application & Content Networking Software (ACNS) 5.2.7 Cisco Application & Content Networking Software (ACNS) 5.2.3 .9 Cisco Application & Content Networking Software (ACNS) 5.2.1 .7 Cisco Application & Content Networking Software (ACNS) 5.1.15 Cisco Application & Content Networking Software (ACNS) 5.1.13 .7 Cisco Application & Content Networking Software (ACNS) 5.1.11 .6 Cisco Application & Content Networking Software (ACNS) 5.1.9 + Cisco Content Engine 565 Cisco Application & Content Networking Software (ACNS) 5.1 Cisco Application & Content Networking Software (ACNS) 5.0.17 .6 Cisco Application & Content Networking Software (ACNS) 5.0.5 Cisco Application & Content Networking Software (ACNS) 5.0.3 Cisco Application & Content Networking Software (ACNS) 5.0.1 Cisco Application & Content Networking Software (ACNS) 5.0 Cisco Application & Content Networking Software (ACNS) 4.2.11 Cisco Application & Content Networking Software (ACNS) 4.2.9 Cisco Application & Content Networking Software (ACNS) 4.2.7 Cisco Application & Content Networking Software (ACNS) 4.2 Cisco Application & Content Networking Software (ACNS) 4.1.3 Cisco Application & Content Networking Software (ACNS) 4.1.1 Cisco Application & Content Networking Software (ACNS) 4.0.3 Cisco Application & Content Networking Software (ACNS) 5.2.0 Cisco Application & Content Networking Software (ACNS) 0 Cisco Application & Content Networking Software (ACNS) Cisco ACE XML Gateway 0 Cisco ACE Appliance 0 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 4.0 Avaya Messaging Storage Server 3.1 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server Avaya Message Networking MN 3.1 Avaya Message Networking 3.1 Avaya Message Networking Avaya Intuity Audix R5 0 Avaya Intuity AUDIX LX 2.0 Avaya Intuity AUDIX Avaya Interactive Response 3.0 Avaya Interactive Response 2.0 Avaya EMMC 1.021 Avaya EMMC 1.017 Avaya Communication Manager 5.0 Avaya Communication Manager 4.0 Avaya Communication Manager 3.1 Avaya Communication Manager 3.0 Avaya Aura SIP Enablement Services 3.1.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura Application Enablement Services 3.1.5 Avaya Aura Application Enablement Services 4.2 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.5
Not Vulnerable:	VMWare ESX Server 2.5.5 patch 10 Net-SNMP Net-SNMP 5.4.1 .1 Net-SNMP Net-SNMP 5.3.2 .1 Net-SNMP Net-SNMP 5.2.4 .1 Ingate SIParator 4.7.1 Ingate Firewall 4.7.1 Apple Mac OS X Server 10.5.4 Apple Mac OS X 10.5.4

Net-SNMP Remote Authentication Bypass Vulnerability

Net-SNMP is prone to a remote authentication-bypass vulnerability caused by a design error.

Successfully exploiting this issue will allow attackers to gain unauthorized access to the affected application.

Net-SNMP 5.4.1, 5.3.2, 5.2.4, and prior versions are vulnerable.

Net-SNMP Remote Authentication Bypass Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/29623.zip

Net-SNMP Remote Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu libsnmp-base_5.3.1-6ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 3.1-6ubuntu2.2_all.deb


• Ubuntu libsnmp-dev_5.3.1-6ubuntu2.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-dev_5.3 .1-6ubuntu2.2_powerpc.deb


• Ubuntu libsnmp-perl_5.3.1-6ubuntu2.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 3.1-6ubuntu2.2_powerpc.deb


• Ubuntu libsnmp10_5.3.1-6ubuntu2.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp10_5.3.1 -6ubuntu2.2_powerpc.deb


• Ubuntu snmp_5.3.1-6ubuntu2.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.3.1-6ubu ntu2.2_powerpc.deb


• Ubuntu snmpd_5.3.1-6ubuntu2.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.3.1-6ub untu2.2_powerpc.deb


• Ubuntu tkmib_5.3.1-6ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.3.1 -6ubuntu2.2_all.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu libsnmp-base_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 4.1~dfsg-7.1ubuntu6.1_all.deb


• Ubuntu libsnmp-dev_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-dev_5.4.1~dfsg-7. 1ubuntu6.1_powerpc.deb


• Ubuntu libsnmp-perl_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-perl_5.4.1~dfsg-7 .1ubuntu6.1_powerpc.deb


• Ubuntu libsnmp-python_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/n/net-snmp/libsnmp-python_5.4.1~ dfsg-7.1ubuntu6.1_powerpc.deb


• Ubuntu libsnmp15_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp15_5.4.1~dfsg-7.1u buntu6.1_powerpc.deb


• Ubuntu snmp_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmp_5.4.1~dfsg-7.1ubuntu 6.1_powerpc.deb


• Ubuntu snmpd_5.4.1~dfsg-7.1ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmpd_5.4.1~dfsg-7.1ubunt u6.1_powerpc.deb


• Ubuntu tkmib_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.4.1 ~dfsg-7.1ubuntu6.1_all.deb

Debian Linux 4.0 amd64

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_amd64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_amd64.deb


• Debian libsnmp9-dev_5.2.3-7etch4_amd64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_amd64.deb


• Debian libsnmp9_5.2.3-7etch4_amd64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_amd64.deb


• Debian snmp_5.2.3-7etch4_amd64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_amd64.deb


• Debian snmpd_5.2.3-7etch4_amd64.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_amd64.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Debian Linux 4.0 ia-32

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_i386.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_i386.deb


• Debian libsnmp9-dev_5.2.3-7etch4_i386.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_i386.deb


• Debian libsnmp9_5.2.3-7etch4_i386.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_i386.deb


• Debian snmp_5.2.3-7etch4_i386.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_i386.deb


• Debian snmpd_5.2.3-7etch4_i386.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_i386.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu libsnmp-base_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 4.1~dfsg-7.1ubuntu6.1_all.deb


• Ubuntu libsnmp-dev_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-dev_5.4.1~dfsg-7. 1ubuntu6.1_sparc.deb


• Ubuntu libsnmp-perl_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp-perl_5.4.1~dfsg-7 .1ubuntu6.1_sparc.deb


• Ubuntu libsnmp-python_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/n/net-snmp/libsnmp-python_5.4.1~ dfsg-7.1ubuntu6.1_sparc.deb


• Ubuntu libsnmp15_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/libsnmp15_5.4.1~dfsg-7.1u buntu6.1_sparc.deb


• Ubuntu snmp_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmp_5.4.1~dfsg-7.1ubuntu 6.1_sparc.deb


• Ubuntu snmpd_5.4.1~dfsg-7.1ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/main/n/net-snmp/snmpd_5.4.1~dfsg-7.1ubunt u6.1_sparc.deb


• Ubuntu tkmib_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.4.1 ~dfsg-7.1ubuntu6.1_all.deb

Debian Linux 4.0 mips

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_mips.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_mips.deb


• Debian libsnmp9-dev_5.2.3-7etch4_mips.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_mips.deb


• Debian libsnmp9_5.2.3-7etch4_mips.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_mips.deb


• Debian snmp_5.2.3-7etch4_mips.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_mips.deb


• Debian snmpd_5.2.3-7etch4_mips.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_mips.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Debian Linux 4.0 arm

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_arm.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_arm.deb


• Debian libsnmp9-dev_5.2.3-7etch4_arm.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_arm.deb


• Debian libsnmp9_5.2.3-7etch4_arm.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_arm.deb


• Debian snmp_5.2.3-7etch4_arm.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_arm.deb


• Debian snmpd_5.2.3-7etch4_arm.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_arm.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Debian Linux 4.0 powerpc

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian libsnmp-perl_5.2.3-7etch4_powerpc.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-perl_5 .2.3-7etch4_powerpc.deb


• Debian libsnmp9-dev_5.2.3-7etch4_powerpc.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9-dev_5 .2.3-7etch4_powerpc.deb


• Debian libsnmp9_5.2.3-7etch4_powerpc.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp9_5.2.3 -7etch4_powerpc.deb


• Debian snmp_5.2.3-7etch4_powerpc.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmp_5.2.3-7et ch4_powerpc.deb


• Debian snmpd_5.2.3-7etch4_powerpc.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/snmpd_5.2.3-7e tch4_powerpc.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu libsnmp-base_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 4.1~dfsg-7.1ubuntu6.1_all.deb


• Ubuntu libsnmp-dev_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-dev_5.4 .1~dfsg-7.1ubuntu6.1_i386.deb


• Ubuntu libsnmp-perl_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 4.1~dfsg-7.1ubuntu6.1_i386.deb


• Ubuntu libsnmp-python_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/libsnmp-pyt hon_5.4.1~dfsg-7.1ubuntu6.1_i386.deb


• Ubuntu libsnmp15_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp15_5.4.1 ~dfsg-7.1ubuntu6.1_i386.deb


• Ubuntu snmp_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.4.1~dfsg -7.1ubuntu6.1_i386.deb


• Ubuntu snmpd_5.4.1~dfsg-7.1ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.4.1~dfs g-7.1ubuntu6.1_i386.deb


• Ubuntu tkmib_5.4.1~dfsg-7.1ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.4.1 ~dfsg-7.1ubuntu6.1_all.deb

Debian Linux 4.0 m68k

• Debian libsnmp-base_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/libsnmp-base_5 .2.3-7etch4_all.deb


• Debian tkmib_5.2.3-7etch4_all.deb
  http://security.debian.org/pool/updates/main/n/net-snmp/tkmib_5.2.3-7e tch4_all.deb

Net-SNMP Remote Authentication Bypass Vulnerability

References:

• Bugzilla Bug 447974: CVE-2008-0960 net-snmp SNMPv3 authentication bypass (VU#87 (Red Hat)
  
• #2008-006 multiple SNMP implementations HMAC authentication spoofing (oCERT)
  
• About the security content of Security Update 2008-004 and Mac OS X 10.5.4 (Apple)
  
• Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of th (Cisco)
  
• Net-SNMP Homepage (Net-SNMP)
  
• Release notice for Ingate Firewall 471 and Ingate SIParator 471 (Ingate)
  
• [oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing (Andrea Barisani )
  
• Cisco Security Advisory: SNMP Version 3 Authentication Vulnerabilities (Cisco Systems Product Security Incident Response Team )
  
• SNMPv3 Authentication Bypass - CVE-2008-0960 (inode )
  
• VMSA-2008-0013 Updated ESX packages for OpenSSL, net-snmp, perl (VMware Security Team )
  
• ASA-2008-252 SNMPv3 Authentication Bypass Vulnerability in snmpd(1M) (Sun 238865 (Avaya)
  
• ASA-2008-282 - net-snmp security update (RHSA-2008-0529) (Avaya)
  
• Cisco Security Advisory: SNMP Version 3 Authentication Vulnerabilities (Cisco)
  
• Ingate Firewall and SIParator affected by SNMPv3 vulnerability (Ingate)
  
• Juniper Networks, Inc. Information for VU#878044 (US-CERT)
  
• Nortel Response to Potential Authentication Bypass Vulnerability in SNMPv3 (Nortel Networks)
  
• Nortel Response to Potential Authentication Bypass Vulnerability in SNMPv3 (Nortel Networks)
  
• RHSA-2008:0529-4: net-snmp security update (Red Hat)
  
• Solution 238865: SNMPv3 Authentication Bypass Vulnerability in snmpd(1M) (Sun Microsystems)
  
• ucd-snmp security update (Red Hat)
  
• Vulnerability Note VU#878044 (US-CERT)