From owner-freebsd-ports-bugs@FreeBSD.ORG Tue Nov 11 03:10:02 2008 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1D3EB1065678 for ; Tue, 11 Nov 2008 03:10:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id ECF908FC16 for ; Tue, 11 Nov 2008 03:10:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id mAB3A1QS069322 for ; Tue, 11 Nov 2008 03:10:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id mAB3A1GA069321; Tue, 11 Nov 2008 03:10:01 GMT (envelope-from gnats) Resent-Date: Tue, 11 Nov 2008 03:10:01 GMT Resent-Message-Id: <200811110310.mAB3A1GA069321@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, "Mark D. Foster" Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 32A771065689 for ; Tue, 11 Nov 2008 03:09:07 +0000 (UTC) (envelope-from mark@foster.cc) Received: from QMTA03.westchester.pa.mail.comcast.net (qmta03.westchester.pa.mail.comcast.net [76.96.62.32]) by mx1.freebsd.org (Postfix) with ESMTP id 40EBB8FC16 for ; Tue, 11 Nov 2008 03:09:05 +0000 (UTC) (envelope-from mark@foster.cc) Received: from OMTA14.westchester.pa.mail.comcast.net ([76.96.62.60]) by QMTA03.westchester.pa.mail.comcast.net with comcast id dcsa1a0021HzFnQ53f8LW4; Tue, 11 Nov 2008 03:08:20 +0000 Received: from [192.168.1.9] ([24.17.96.78]) by OMTA14.westchester.pa.mail.comcast.net with comcast id df8p1a00F1hTbBL3af8qQ8; Tue, 11 Nov 2008 03:08:51 +0000 Message-Id: <4918F74C.8000508@foster.cc> Date: Mon, 10 Nov 2008 19:09:00 -0800 From: "Mark D. Foster" To: FreeBSD-gnats-submit@FreeBSD.org Cc: security-team@FreeBSD.org, kuriyama@FreeBSD.org Subject: ports/128772: vuxml update for security vulnerability: net-mgmt/net-snmp* X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Nov 2008 03:10:02 -0000 >Number: 128772 >Category: ports >Synopsis: vuxml update for security vulnerability: net-mgmt/net-snmp* >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Tue Nov 11 03:10:01 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Mark Foster >Release: FreeBSD 7.0-RELEASE-p3 i386 >Organization: >Environment: System: FreeBSD gomer.foster.dmz 7.0-RELEASE-p3 FreeBSD 7.0-RELEASE-p3 #6: Wed Aug 27 05:57:37 PDT 2008 root@gomer.foster.dmz:/usr/obj/usr/src/sys/GENERIC i386 >Description: >How-To-Repeat: >Fix: --- vuln.xml.patch begins here --- --- vuln.xml.old 2008-11-11 02:07:56.000000000 -0800 +++ vuln.xml 2008-11-11 02:27:10.000000000 -0800 @@ -34,6 +34,36 @@ --> + + net-snmp -- GETBULK Remote Denial of Service + + + net-snmp + net-snmp53 + + 5.4.2.1 + 5.3.2.3 + 5.2.5.1 + + + + + +

SANS reports:

+
+

Net-SNMP is exposed to an unspecified remote denial of service issue related to the handling of "GETBULK" SNMP requests.

+
+ + + + http://sourceforge.net/forum/forum.php?forum_id=882903 + + + 2008-11-11 + 2008-11-11 + + + trac -- potential DOS vulnerability --- vuln.xml.patch ends here --- >Release-Note: >Audit-Trail: >Unformatted: