Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 04 Dec 2013 13:00:33 -0700
From: Kurt Seifried <kseifried@...hat.com>
To: Open Source Security <oss-security@...ts.openwall.com>
Subject: Re: SNMPD DoS #2411 snmpd crashes/hangs when AgentX subagent times-out

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/02/2013 10:54 PM, Kurt Seifried wrote:
> Just cleaning out old email, ran across this:
> 
> http://sourceforge.net/p/net-snmp/bugs/2411/
> 
> It's a DoS, requires authenticated access but snmpd is often used to
> monitor a lot of systems not always under your direct control (e.g.
> read only access). I'm inclined to assign a CVE unless someone objects
> strongly.

Please use CVE-2012-6151 for this issue.

- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
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=v98p
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.