REDHAT-BUG-447974
First published: Thu May 22 2008(Updated: )
CERT has told us of an authentication bypass flaw in Net-SNMP and UCD-SNMP. According to net-snmp: "The quick technical summary is that the SNMPv3 packet contains a truncated HMAC authentication code. The author that wrote the code very very long ago to check that HMAC code used the length of the packet's version of the HMAC code to do the check. Thus if you send a single byte HMAC code, it'll only check it against the first byte of HMAC output. Thus it's fairly easy to spoof an authenticated SNMPv3 packet."
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Net-SNMP | ||
| vne-snmp |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=306408&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=306408&action=edit
- http://www.ocert.org/advisories/ocert-2008-006.html
- http://sourceforge.net/forum/forum.php?forum_id=833770
- http://sourceforge.net/tracker/index.php?func=detail&aid=1989089&group_id=12694&atid=456380
- http://lab.mediaservice.net/code.php#snmpv3
- https://bugzilla.redhat.com/show_bug.cgi?id=447974
Frequently Asked Questions
What is the severity of REDHAT-BUG-447974?
The severity of REDHAT-BUG-447974 is classified as critical due to its nature as an authentication bypass flaw.
How do I fix REDHAT-BUG-447974?
To fix REDHAT-BUG-447974, you should apply the relevant patches provided by the maintainers of Net-SNMP and UCD-SNMP.
What systems are impacted by REDHAT-BUG-447974?
REDHAT-BUG-447974 affects systems running Net-SNMP and UCD-SNMP versions that utilize SNMPv3.
Is there a known exploit for REDHAT-BUG-447974?
Yes, there are known exploits for REDHAT-BUG-447974 that can be used to bypass authentication and gain unauthorized access.
What are the common consequences of exploiting REDHAT-BUG-447974?
Exploiting REDHAT-BUG-447974 can allow attackers to access sensitive information and potentially control networked devices.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2008-0960
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/net-snmp
- canonical/net-snmp
- vendor/ucd-snmp
- canonical/vne-snmp