Multiple Vendor SNMP Trap Handling Vulnerabilities
BID:4088
Info
Multiple Vendor SNMP Trap Handling Vulnerabilities
| Bugtraq ID: | 4088 |
| Class: | Unknown |
| CVE: |
CVE-2002-0012 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 12 2002 12:00AM |
| Updated: | Jul 11 2009 10:56AM |
| Credit: | Discovered by the Oulu University Secure Programming Group. |
| Vulnerable: |
Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6 Sun Enterprise 10000 Server SSP 3.5 Sun Enterprise 10000 Server SSP 3.4 Sun Enterprise 10000 Server SSP 3.3 SNMP Research Mid-Level Manager 15.3 SNMP Research Enterpol 15.3 SNMP Research DR-Web Manager 15.3 SGI Brocade 2.6 .0 RedBack Networks AOS RealNetworks RealPlayer Intranet 5.0 Process Software TCPWare 5.5 Process Software Multinet 4.4 Oracle Enterprise Manager 9.0.1 Oracle Enterprise Manager 2.2 Oracle Enterprise Manager 2.1 Oracle Enterprise Manager 2.0 Oracle Enterprise Manager 1.6.5 Novell Netware 6.0 Novell Netware 5.1 Novell Netware 5.0 Novell Netware 4.11 Novell Netware 4.2 Novell Netware 4.0 Net-SNMP ucd-snmp 4.2.1 Net-SNMP ucd-snmp 4.1.1 Microsoft Windows XP Professional Microsoft Windows XP Home Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT Workstation 4.0 SP6 Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Terminal Server 4.0 SP6 Microsoft Windows NT Terminal Server 4.0 SP5 Microsoft Windows NT Terminal Server 4.0 SP4 Microsoft Windows NT Terminal Server 4.0 SP3 Microsoft Windows NT Terminal Server 4.0 SP2 Microsoft Windows NT Terminal Server 4.0 SP1 Microsoft Windows NT Terminal Server 4.0 Microsoft Windows NT Server 4.0 SP6a Microsoft Windows NT Server 4.0 SP6 Microsoft Windows NT Server 4.0 SP5 Microsoft Windows NT Server 4.0 SP4 Microsoft Windows NT Server 4.0 SP3 Microsoft Windows NT Server 4.0 SP2 Microsoft Windows NT Server 4.0 SP1 Microsoft Windows NT Server 4.0 Microsoft Windows NT Enterprise Server 4.0 SP6a Microsoft Windows NT Enterprise Server 4.0 SP6 Microsoft Windows NT Enterprise Server 4.0 SP5 Microsoft Windows NT Enterprise Server 4.0 SP4 Microsoft Windows NT Enterprise Server 4.0 SP3 Microsoft Windows NT Enterprise Server 4.0 SP2 Microsoft Windows NT Enterprise Server 4.0 SP1 Microsoft Windows NT Enterprise Server 4.0 Microsoft Windows 98SE Microsoft Windows 98 Microsoft Windows 95 Microsoft Windows 2000 Terminal Services SP2 Microsoft Windows 2000 Terminal Services SP1 Microsoft Windows 2000 Terminal Services Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Lotus Domino SNMP Agents 5.0.1 Solaris x86 Lotus Domino SNMP Agents 5.0.1 Solaris SPARC Lotus Domino SNMP Agents 5.0.1 HP-UX Lantronix LRS Juniper JUNOS 5.0 Innerdive Solutions Router IP Console 3.3 .0.406 IBM AIX 4.3.3 IBM AIX 4.3.2 IBM AIX 4.3.1 IBM AIX 4.3 IBM AIX 5.1 HP Secure OS software for Linux 1.0 HP Procurve Switch 8000M HP Procurve Switch 4108GL-bundle HP Procurve Switch 4108GL HP Procurve Switch 4000M HP Procurve Switch 2525 HP Procurve Switch 2524 HP Procurve Switch 2512 HP Procurve Switch 2424M HP Procurve Switch 2400M HP Procurve Switch 1600M HP OV/SAM 3.0.1 HP OpenView Network Node Manager 6.10 HP OpenView Network Node Manager 6.2 Solaris HP OpenView Network Node Manager 6.2 NT 4.X/Windows 2000 HP OpenView Network Node Manager 6.2 HP-UX 11.X HP OpenView Network Node Manager 6.2 HP-UX 10.X HP OpenView Network Node Manager 6.2 HP OpenView Network Node Manager 6.1 Solaris HP OpenView Network Node Manager 6.1 HP-UX 11.X HP OpenView Network Node Manager 6.1 HP-UX 10.X HP OpenView Network Node Manager 6.0 Solaris HP OpenView Network Node Manager 6.0 NT 4.X/Windows 2000 HP OpenView Network Node Manager 6.0 HP-UX 11.X HP OpenView Network Node Manager 6.0 HP-UX 10.20 HP OpenView Network Node Manager 5.0.2 Windows NT 3.51/4.0 HP OpenView Network Node Manager 5.0 1 Solaris HP OpenView Network Node Manager 5.0 1 HP-UX HP OpenView Network Node Manager 5.0 1 HP OpenView Network Node Manager 4.1 1 Solaris HP OpenView Network Node Manager 4.1 1 HP-UX HP OpenView Extensible SNMP Agent 4.0 HP OpenView Emanate SNMP Agent 14.2 Solaris 2.X HP OpenView Emanate SNMP Agent 14.2 HP-UX 11.X HP OpenView Emanate SNMP Agent 14.2 HP-UX 10.20 HP OpenView Distributed Management 6.0 HP OpenView Distributed Management 5.0 3 HP MPE/iX 6.5 HP MPE/iX 6.0 HP MPE/iX 5.5 HP MPE/iX 5.0 HP MPE/iX 4.5 HP MPE/iX 4.0 HP MC/ServiceGuard HP JetDirect x.20.00 HP JetDirect x.08.32 HP JetDirect x.08.00 HP ITO/VPO/OVO Unix 6.0 HP HP-UX (VVOS) 11.0 4 HP HP-UX (VVOS) 10.24 HP HP-UX 11.20 HP HP-UX 11.11 HP HP-UX 11.0 HP HP-UX 10.20 HP HP-UX 10.10 HP HP-UX 10.0 HP EMS A.03.20 HP EMS A.03.10 HP EMS A.03.00 Comtek Services NMServer 3.4 Computer Associates Unicenter Caldera UnixWare 7.1.1 Caldera UnixWare 7.1 .0 Caldera UnixWare 7 Caldera OpenUnix 8.0 Caldera OpenServer 5.0.6 Caldera OpenServer 5.0.5 CacheFlow CacheOS 4.0 CacheFlow CacheOS 3.1 AdventNet Web NMS MSP Edition AdventNet Web NMS AdventNet SNMP Utilities AdventNet SNMP API AdventNet Mediation Server AdventNet Management Builder AdventNet Fault Management Toolkit AdventNet Configuration Management Toolkit AdventNet CLI API AdventNet Agent Toolkit Java/JMX Edition AdventNet Agent Toolkit - C Edition 3Com WebCache 3000 3Com WebCache 1000 3Com Switch 4900 3Com Switch 4400 3Com Switch 3300 3Com Switch 1100 3Com PS Hub 50 3Com PS Hub 40 3Com Dual Speed Hub |
| Not Vulnerable: |
SGI Brocade 2.6 .0d Net-SNMP ucd-snmp 4.2.2 Innerdive Solutions Router IP Console 3.3 .0.407 HP JetDirect x.21.00 HP JetDirect x.08.32 |
References
Multiple Vendor SNMP Trap Handling Vulnerabilities
References:
References:
- 42769 (Sun Microsystems)
- CA-2002-03 (CERT)
- Feds, Industry, Battle the Biggest Bug (SecurityFocus)
- Microsoft Security Bulletin MS02-006 (Microsoft)
- Oracle Security Alert #30 (Oracle)