Net – SNMP未授权的MIB对象访问漏洞

漏洞信息详情

Net – SNMP未授权的MIB对象访问漏洞

• CNNVD编号：CNNVD-200312-011
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2003-0935
  
• 漏洞类型：
  
  
  访问验证错误
  
• 发布时间：
  
  2003-12-01
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  net-snmp
• 漏洞来源：
  This issue was ann…

Net-SNMP 5.0.9之前的版本存在漏洞。用户或社区在MIB对象里访问数据，即使该数据是不允许查看的。

Conectiva has released an advisory (CLA-2003:778) that includes updates which address this issue.
Red Hat has released advisory RHSA-2003:335-01 to address this issue.
This issue has been addressed in Net-SNMP 5.0.9.
Mandrake Linux has released advisory MDKSA-2003:115 to address this issue.
Net-SNMP Net-SNMP 5.0.1

• Net-SNMP Net-SNMP 5.0.9
  
  http://sourceforge.net/project/showfiles.php?group_id=12694

Net-SNMP Net-SNMP 5.0.3

• Net-SNMP Net-SNMP 5.0.9
  
  http://sourceforge.net/project/showfiles.php?group_id=12694

Net-SNMP Net-SNMP 5.0.4 .pre2

• Net-SNMP Net-SNMP 5.0.9
  
  http://sourceforge.net/project/showfiles.php?group_id=12694

Net-SNMP Net-SNMP 5.0.5

• Net-SNMP Net-SNMP 5.0.9
  
  http://sourceforge.net/project/showfiles.php?group_id=12694

Net-SNMP Net-SNMP 5.0.6

• Net-SNMP Net-SNMP 5.0.9
  
  http://sourceforge.net/project/showfiles.php?group_id=12694

Net-SNMP Net-SNMP 5.0.7

• Conectiva net-snmp-5.0.9-27290U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/net-snmp-5.0.9-27290U90_1cl
  .i386.rpm
• Conectiva net-snmp-devel-5.0.9-27290U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/net-snmp-devel-5.0.9-27290U
  90_1cl.i386.rpm
• Conectiva net-snmp-devel-static-5.0.9-27290U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/net-snmp-devel-static-5.0.9
  -27290U90_1cl.i386.rpm
• Conectiva net-snmp-doc-5.0.9-27290U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/net-snmp-doc-5.0.9-27290U90
  _1cl.i386.rpm
• Conectiva net-snmp-utils-5.0.9-27290U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/net-snmp-utils-5.0.9-27290U
  90_1cl.i386.rpm
• Net-SNMP Net-SNMP 5.0.9
  
  http://sourceforge.net/project/showfiles.php?group_id=12694

Net-SNMP Net-SNMP 5.0.8

• Net-SNMP Net-SNMP 5.0.9
  
  http://sourceforge.net/project/showfiles.php?group_id=12694

MandrakeSoft Linux Mandrake 9.1

• Mandrake libnet-snmp50-5.0.9-1.1.91mdk.i586.rpmMandrake Linux 9.1FTP Folder: 9.1/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake libnet-snmp50-devel-5.0.9-1.1.91mdk.i586.rpmMandrake Linux 9.1FTP Folder: 9.1/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake libnet-snmp50-static-devel-5.0.9-1.1.91mdk.i586.rpmMandrake Linux 9.1FTP Folder: 9.1/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-5.0.9-1.1.91mdk.i586.rpmMandrake Linux 9.1FTP Folder: 9.1/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-mibs-5.0.9-1.1.91mdk.i586.rpmMandrake Linux 9.1FTP Folder: 9.1/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-trapd-5.0.9-1.1.91mdk.i586.rpmMandrake Linux 9.1FTP Folder: 9.1/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-utils-5.0.9-1.1.91mdk.i586.rpmMandrake Linux 9.1FTP Folder: 9.1/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php

MandrakeSoft Linux Mandrake 9.1 ppc

• Mandrake libnet-snmp50-5.0.9-1.1.91mdk.ppc.rpmMandrake Linux 9.1/PPCFTP Folder: ppc/9.1/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake libnet-snmp50-devel-5.0.9-1.1.91mdk.ppc.rpmMandrake Linux 9.1/PPCFTP Folder: ppc/9.1/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake libnet-snmp50-static-devel-5.0.9-1.1.91mdk.ppc.rpmMandrake Linux 9.1/PPCFTP Folder: ppc/9.1/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-5.0.9-1.1.91mdk.ppc.rpmMandrake Linux 9.1/PPCFTP Folder: ppc/9.1/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-mibs-5.0.9-1.1.91mdk.ppc.rpmMandrake Linux 9.1/PPCFTP Folder: ppc/9.1/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-trapd-5.0.9-1.1.91mdk.ppc.rpmMandrake Linux 9.1/PPCFTP Folder: ppc/9.1/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-utils-5.0.9-1.1.91mdk.ppc.rpmMandrake Linux 9.1/PPCFTP Folder: ppc/9.1/
  
  http://www.mandrakesecure.net/en/ftp.php

MandrakeSoft Linux Mandrake 9.2

• Mandrake libnet-snmp50-5.0.9-7.1.92mdk.i586.rpmMandrake Linux 9.2FTP Folder: 9.2/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake libnet-snmp50-devel-5.0.9-7.1.92mdk.i586.rpmMandrake Linux 9.2FTP Folder: 9.2/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake libnet-snmp50-static-devel-5.0.9-7.1.92mdk.i586.rpmMandrake Linux 9.2FTP Folder: 9.2/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-5.0.9-7.1.92mdk.i586.rpmMandrake Linux 9.2FTP Folder: 9.2/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-mibs-5.0.9-7.1.92mdk.i586.rpmMandrake Linux 9.2FTP Folder: 9.2/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-trapd-5.0.9-7.1.92mdk.i586.rpmMandrake Linux 9.2FTP Folder: 9.2/RPMS/
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake net-snmp-utils-5.0.9-7.1.92mdk.i586.rpmMandrake Linux 9.2FTP Folder: 9.2/RPMS/
  

  参考网址

  来源: REDHAT
  名称: RHSA-2003:335
  链接:http://www.redhat.com/support/errata/RHSA-2003-335.html

  来源: sourceforge.net
  链接:http://sourceforge.net/forum/forum.php?forum_id=308015

  来源: REDHAT
  名称: RHSA-2004:023
  链接:http://www.redhat.com/support/errata/RHSA-2004-023.html

  来源: OVAL
  名称: oval:org.mitre.oval:def:9802
  链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9802

  来源: CONECTIVA
  名称: CLA-2003:778
  链接:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000778

  来源: US Government Resource: oval:org.mitre.oval:def:869
  名称: oval:org.mitre.oval:def:869
  链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:869