USN-9062-1: snmptt vulnerability
It was discovered that SNMPTT did not properly sanitize trap data passed to commands run through the EXEC, PREEXEC, and unknowntrapexec options. A remote attacker could possibly use this issue to execute arbitrary shell commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/snmpttto a version that resolves this vulnerability.Fixed in 1.4-1ubuntu0.16.04.1~esm1 - Upgrade
Upgrade
ubuntu/snmpttto a version that resolves this vulnerability.Fixed in 1.4-1ubuntu0.18.04.1~esm1 - Upgrade
Upgrade
ubuntu/snmpttto a version that resolves this vulnerability.Fixed in 1.4-2ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/snmpttto a version that resolves this vulnerability.Fixed in Ubuntu Pro
Event History
Frequently Asked Questions
Which SNMPTT configurations are affected?
The issue affects trap data passed to commands executed through the EXEC, PREEXEC, and unknown_trap_exec options.
What would an attacker need to exploit this issue?
A remote attacker would need to provide malicious trap data to an affected SNMPTT configuration so that the data is passed to a command through one of the affected options.