• # Ca a pas un rapport avec CAN-2002-0012 and CAN-2002-0013

    Posté par . En réponse à la dépêche Un trou de sécurité menace le traffic Internet. Évalué à 5.

    Errata hier de RedHat :

    Security Advisory - RHSA-2001:163-20
    ------------------------------------------------------------------------------
    Summary:
    Updated ucd-snmp packages available

    Description:
    The Simple Network Management Protocol (SNMP) enables
    monitoring and configuration of network nodes.

    The Oulu University Secure Programming Group performed
    a vulnerability assessment of various SNMP implementations through syntax
    testing and test-suite creation.

    The test-suite showed several failures in the ucd-snmp tools in version
    4.2.2 and earlier. These vulnerabilities can cause denial-of-service
    conditions, service interruptions, and in some cases could result in a
    remote security breach.

    Updated ucd-snmp packages are provided that are not susceptible to these
    vulnerabilities and which pass all tests of the test-suite sucessfully.

    The Common Vulnerabilities and Exposures project (cve.mitre.org) has
    assigned the names CAN-2002-0012 and CAN-2002-0013 to these issues.