Observer SNMP SetRequest access rejection Vulnerability

Release date: 2012-03-12
Updated on: 2012-03-13

Affected Systems:
Observer 15.x
Description:
--------------------------------------------------------------------------------
Observer is a network monitoring and protocol analysis product that supports Ethernet, Wireless 802.11b/a/g, Token Ring, and FDDI network environments. Observer provides testing, capturing, and trend analysis for both shared and switched network environments.

When the Observer copies the octet string from the variable binding list, there is a null pointer reference error. You can cause a crash by sending the specially crafted SNMP SetRequest PDU sent to UDP port 162.

<* Source: Francis Provencher

Link: http://secunia.com/advisories/47898/

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Observer
--------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version: