RHSA-2009:0295: Moderate: net-snmp security update
The Simple Network Management Protocol (SNMP) is a protocol used fornetwork management.It was discovered that the snmpd daemon did not use TCP wrappers correctly,causing network hosts access restrictions defined in "/etc/hosts.allow" and"/etc/hosts.deny" to not be honored. A remote attacker could use this flawto bypass intended access restrictions. (CVE-2008-6123)This issue only affected configurations where hosts.allow and hosts.denywere used to limit access to the SNMP server. To obtain information fromthe server, the attacker would have to successfully authenticate, usuallyby providing a correct community string.All net-snmp users should upgrade to these updated packages, which containa backported patch to correct this issue. After installing the update, thesnmpd and snmptrapd daemons will be restarted automatically.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:0295?
The severity of RHSA-2009:0295 is classified as moderate.
How do I fix RHSA-2009:0295?
To fix RHSA-2009:0295, update the snmpd package to the latest version provided by your distribution.
What systems are affected by RHSA-2009:0295?
RHSA-2009:0295 affects systems running configurations with the snmpd daemon.
What does RHSA-2009:0295 vulnerability affect in SNMP?
The RHSA-2009:0295 vulnerability affects the incorrect implementation of TCP wrappers in the snmpd daemon.
Is there a workaround for RHSA-2009:0295?
A potential workaround for RHSA-2009:0295 includes manually restricting access using firewall rules until a patch is applied.