Net-SNMP Agent MIB subtree Remote Denial of Service Vulnerability

Release date:
Updated on: 2012-04-27

Affected Systems:
Net-SNMP net-snmp 5.7.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 53258

Net-SNMP is a free, open-source SNMP implementation, formerly called UCD-SNMP.

Net-SNMP function "handle_nsExtendOutput2Table ()" (agent/mibgroup/agent/extend. c) an array index error exists. You can use a specially crafted snmp get request to cause the "snmpd" process to crash.

<* Source: Sergio Freire

Link: http://secunia.com/advisories/48938/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Net-SNMP
--------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://sourceforge.net/projects/net-snmp/