Multiple SNMP problems updated since 13.02.2002
Published:		25.07.2003
Source:		CERT
SecurityVulns ID:		1779
Type:		remote
Level:		6/10
Description:		Multiple problems in different SNMP implementation can lead to DoS, remote code execution, etc.

Affected:		MICROSOFT : Windows NT 4.0 Workstation
		MICROSOFT : Windows NT 4.0 Server
		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		NOVELL : Netware 5.1
		MICROSOFT : Windows 98
		MICROSOFT : Windows 95
		SUN : Solaris 2.6
		HP : Openview Network Node Manager 6.1
		SGI : Irix 6.5
		NOVELL : Netware 5.0
		HP : HP-UX 11.00
		ORACLE : Solaris 8
		HP : HP-UX 10.20
		SUN : Solaris 7
		CALDERA : Unixware 7
		MICROSOFT : Windows ME
		LOTUS : Domino 5.0
		SCO : UnixWare 7.1
		HP : HP-UX 11.11
		NETSNMP : ucd-snmp 4.2
		MICROSOFT : Windows XP
		SCO : Open UNIX 8.0
		CACHEFLOW : CacheOS 3.1
		3COM : S Hub 40
		3COM : PS Hub 50
		3COM : Dual Speed Hub
		3COM : Switch 1100
		3COM : Switch 13300
		3COM : Switch 4400
		3COM : Switch 4900
		3COM : WebCache 1000
		3COM : WebCache 3000
		HP : procurve switch 2524
		HP : EIO
		HP : J3110A
		HP : J3111A
		HP : J3112A
		HP : J3113A
		HP : J4169A
		HP : J4167A
		HP : MIO
		HP : J2550A
		HP : J2552A
		HP : J2555A
		HP : J4100A
		HP : J4105A
		HP : J4106A
		HP : External Print Servers
		HP : J3263A
		HP : J3264A
		HP : J3265A
		INNERDRIVE : Router IP Console 3.3
		NETSNMP : ucd-snmp 4.1
		NOKIA : IPSO 3.1
		NOKIA : IPSO 3.3
		NOKIA : IPSO 3.4
		NOVELL : Netware 6.0
		REDBACK : SMS 500
		REDBACK : SMS 1800
		REDBACK : SMS 10000
		ZOT : P100s
		NCIPHER : nFast
		NCIPHER : nForce
		NCIPHER : nShield
		SUN : SunATM 4.0
		SUN : SunATM 5.0
		NETSNMP : Net-SNMP 5.0
		SGI : Brocade Fabric OS 2.6
		SGI : Emulex FibreChannel Hub

Original document		SGI, [Full-Disclosure] Emulex FibreChannel Hub Vulnerable to SNMP DoS Attack (25.07.2003)
		SGI, Brocade Firmware SNMP Vulnerability (12.04.2003)
		IDEFENSE, iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability (03.10.2002)
		Entercept Ricochet Team, Entercept Ricochet Security Advisory: Solaris snmpdx Vulnerabilities (05.06.2002)
		Ross Coppage, ATMSNMPD Vulnerable but not Addressed (13.05.2002)
		X-FORCE, ISS Advisory: Remote Buffer Overflow Vulnerability in IRIX SNMP Daemon (04.04.2002)
		SGI, IRIX SNMP Vulnerabilities (04.04.2002)
		NCIPHER, nCipher Security Advisory #2: SNMP vulnerabilities (01.03.2002)
		Clinton Smith, Zero One Tech (ZOT) P100s PrintServer and SNMP (24.02.2002)
		MICROSOFT, Security Bulletin MS02-006 (13.02.2002)
		X-FORCE, ROTOS Remote SNMP Attack Tool (13.02.2002)
		CERT, CERT Advisory CA-2002-03 Multiple Vulnerabilities in Many Implementations (13.02.2002)

Files:		UCD-snmp 4.2.1 remote exploit
		Proof of concept exploit for ucd-snmpd-4.1.1
Discuss:		Read or add your comments to this news (0 comments)