Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Red Hat Local Security Checks >> RHSA-2004-023: net

Vulnerability Assessment Details

RHSA-2004-023: net

Vulnerability Assessment Summary
Check for the version of the net packages

Detailed Explanation for this Vulnerability Assessment

Updated Net-SNMP packages are available to correct a security vulnerability
and other bugs.

The Net-SNMP project includes various Simple Network Management Protocol
(SNMP) tools.

A security issue in Net-SNMP versions before 5.0.9 could permit an existing
user/community to gain access to data in MIB objects that were explicitly
excluded from their view. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CVE-2003-0935 to this issue.

Users of Net-SNMP are advised to upgrade to these errata packages containing
Net-SNMP 5.0.9 which is not vulnerable to this issue. In addition,
Net-SNMP 5.0.9 fixes a number of other minor bugs.

Solution : http://rhn.redhat.com/errata/RHSA-2004-023.html
Network Security Threat Level: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors