Signature Detail
Short Name |
SNMPTRAP:COMMUNITY:OVERFLOW-1K |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop Packet |
Category |
SNMPTRAP |
Keywords |
Community Overflow in SNMP Trap |
Release Date |
2008/11/13 |
Update Number |
1312 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SNMPTRAP: Community Overflow in SNMP Trap
This signature detects attempts to exploit a known vulnerability in several SNMP implementations. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.
Extended Description
Net-SNMP is prone a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer. Exploiting this issue may allow attackers to execute arbitrary machine code in the context of applications using the affected Net-SNMP Perl module. Failed exploit attempts will likely cause denial-of-service conditions. This issue affects Net-SNMP 5.4.1, 5.2.4, and 5.1.4; other versions may also be vulnerable.
Affected Products
- Avaya Aura Application Enablement Services 3.1.5
- Avaya Aura Application Enablement Services 4.2
- Avaya Aura SIP Enablement Services 3.1.1
- Avaya Aura SIP Enablement Services 5.0
- Avaya Communication Manager 3.0
- Avaya Communication Manager 3.1
- Avaya Communication Manager 4.0
- Avaya Communication Manager 5.0
- Avaya EMMC 1.017
- Avaya EMMC 1.021
- Avaya Intuity AUDIX
- Avaya Intuity AUDIX LX 2.0
- Avaya Intuity Audix R5
- Avaya Message Networking 3.1
- Avaya Message Networking MN 3.1
- Avaya Message Networking
- Avaya Messaging Storage Server 1.0
- Avaya Messaging Storage Server 2.0
- Avaya Messaging Storage Server 3.1
- Avaya Messaging Storage Server 4.0
- Avaya Messaging Storage Server MM3.0
- Avaya Messaging Storage Server
- Debian Linux 4.0
- Debian Linux 4.0 Alpha
- Debian Linux 4.0 Amd64
- Debian Linux 4.0 Arm
- Debian Linux 4.0 Hppa
- Debian Linux 4.0 Ia-32
- Debian Linux 4.0 Ia-64
- Debian Linux 4.0 M68k
- Debian Linux 4.0 Mips
- Debian Linux 4.0 Mipsel
- Debian Linux 4.0 Powerpc
- Debian Linux 4.0 S/390
- Debian Linux 4.0 Sparc
- Gentoo Linux
- Mandriva Corporate Server 3.0.0
- Mandriva Corporate Server 3.0.0 X86 64
- Mandriva Corporate Server 4.0
- Mandriva Linux Mandrake 2007.1
- Mandriva Linux Mandrake 2007.1 X86 64
- Mandriva Linux Mandrake 2008.0
- Mandriva Linux Mandrake 2008.0 X86 64
- Mandriva Linux Mandrake 2008.1
- Mandriva Linux Mandrake 2008.1 X86 64
- Mandriva Multi Network Firewall 2.0.0
- Net-SNMP 5.1.4
- Net-SNMP 5.2.4
- Net-SNMP 5.4.1
- Red Hat Application Server AS 3
- Red Hat Application Server ES 3
- Red Hat Application Server WS 3
- Red Hat Desktop 3.0.0
- Red Hat Desktop 4.0.0
- Red Hat Enterprise Linux 5 Server
- Red Hat Enterprise Linux Desktop Version 4
- Red Hat Enterprise Linux AS 3
- Red Hat Enterprise Linux AS 4
- Red Hat Enterprise Linux Desktop 5 Client
- Red Hat Enterprise Linux Desktop Workstation 5 Client
- Red Hat Enterprise Linux ES 3
- Red Hat Enterprise Linux ES 4
- Red Hat Enterprise Linux WS 4
- Red Hat Enterprise Linux WS 5
- Red Hat Fedora 7
- Red Hat Fedora 8
- Red Hat Fedora 9
- Slackware Linux 12.0
- Slackware Linux 12.1
- Slackware Linux -Current
- Sun OpenSolaris Build Snv 01
- Sun OpenSolaris Build Snv 02
- Sun OpenSolaris Build Snv 13
- Sun OpenSolaris Build Snv 19
- Sun OpenSolaris Build Snv 22
- Sun OpenSolaris Build Snv 64
- Sun OpenSolaris Build Snv 88
- Sun OpenSolaris Build Snv 89
- Sun OpenSolaris Build Snv 91
- Sun OpenSolaris Build Snv 92
- Sun OpenSolaris
- Sun Solaris 10 Sparc
- Sun Solaris 10 X86
- SuSE Novell Linux Desktop 9.0.0
- SuSE Novell Linux POS 9
- SuSE Open-Enterprise-Server
- SuSE openSUSE 10.2
- SuSE openSUSE 10.3
- SuSE openSUSE 11.0
- SuSE SUSE Linux Enterprise Desktop 10 SP1
- SuSE SUSE Linux Enterprise Desktop 10 SP2
- SuSE SUSE Linux Enterprise SDK 10.SP1
- SuSE SUSE Linux Enterprise SDK 10 SP2
- SuSE SUSE Linux Enterprise Server 10 SP1
- SuSE SUSE Linux Enterprise Server 10 SP2
- SuSE SUSE Linux Enterprise Server 9
- Ubuntu Ubuntu Linux 6.06 LTS Amd64
- Ubuntu Ubuntu Linux 6.06 LTS I386
- Ubuntu Ubuntu Linux 6.06 LTS Powerpc
- Ubuntu Ubuntu Linux 6.06 LTS Sparc
- Ubuntu Ubuntu Linux 7.10 Amd64
- Ubuntu Ubuntu Linux 7.10 I386
- Ubuntu Ubuntu Linux 7.10 Lpia
- Ubuntu Ubuntu Linux 7.10 Powerpc
- Ubuntu Ubuntu Linux 7.10 Sparc
- Ubuntu Ubuntu Linux 8.04 LTS Amd64
- Ubuntu Ubuntu Linux 8.04 LTS I386
- Ubuntu Ubuntu Linux 8.04 LTS Lpia
- Ubuntu Ubuntu Linux 8.04 LTS Powerpc
- Ubuntu Ubuntu Linux 8.04 LTS Sparc
- Ubuntu Ubuntu Linux 8.10 Amd64
- Ubuntu Ubuntu Linux 8.10 I386
- Ubuntu Ubuntu Linux 8.10 Lpia
- Ubuntu Ubuntu Linux 8.10 Powerpc
- Ubuntu Ubuntu Linux 8.10 Sparc
- VMWare ESX Server 3.0.1
- VMWare ESX Server 3.0.2
- VMWare ESX Server 3.5
References
- BugTraq: 29212
- CVE: CVE-2008-2292