CVE-2008-4309 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2008-4309
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-4309

Description: Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow, related to the number of responses or repeats.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/46262 UBUNTU http://www.ubuntu.com/usn/usn-685-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-262908-1 ST 1021129 SAID Secunia Advisory: SA32539 Secunia Advisory: SA33095 Secunia Advisory: SA33003 Secunia Advisory: SA33746 Secunia Advisory: SA35074 Secunia Advisory: SA35679 Secunia Advisory: SA32711 Secunia Advisory: SA32664 Secunia Advisory: SA33631 Secunia Advisory: SA32560 Secunia Advisory: SA33821 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0971.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9860 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6353 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6171 MLIST http://www.openwall.com/lists/oss-security/2008/10/31/1 MISC http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/tags/Ext-5-2-5-1/net-snmp/agent/snmp_agent.c?r1=17271&r2=17272&pathrev=17272 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:225 HP http://marc.info/?l=bugtraq&m=125017764422557&w=2 GENTOO http://security.gentoo.org/glsa/glsa-200901-15.xml DEBIAN http://www.debian.org/security/2008/dsa-1663 CONFIRM http://support.apple.com/kb/HT4298 http://support.apple.com/kb/HT3549 http://support.avaya.com/elmodocs2/security/ASA-2008-467.htm http://www.vmware.com/security/advisories/VMSA-2009-0001.html http://sourceforge.net/forum/forum.php?forum_id=882903 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0315 CERT http://www.us-cert.gov/cas/techalerts/TA09-133A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/498280/100/0/threaded BID 32020 APPLE http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability