Net-SNMP: security bugs in versions before 5.0.9 [LWN.net]

Package(s):

Net-SNMP

CVE #(s):

CAN-2003-0935

Created:

December 2, 2003

Updated:

February 13, 2004

Description:

The Net-SNMP project includes various Simple Network Management Protocol (SNMP) tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MIB objects that were explicitly excluded from their view.

Version 5.0.9 of Net-SNMP is not vulnerable to this issue. In addition, Net-SNMP 5.0.9 fixes a number of other minor bugs.

Alerts:

Whitebox	WBSA-2004:023-01	2004-02-12
Red Hat	RHSA-2004:023-01	2004-01-15
Mandrake	MDKSA-2003:115	2003-12-11
Red Hat	RHSA-2003:335-01	2003-12-02

(Log in to post comments)