Ubuntu Security Notice (C) 2008-2013 Canonical, Inc. / NASL script (C) 2009-2013 Tenable Network Security, Inc.
The remote Ubuntu host is missing one or more security-related patches.
Wes Hardaker discovered that the SNMP service did not correctly
validate HMAC authentication requests. An unauthenticated remote
attacker could send specially crafted SNMPv3 traffic with a valid
username and gain access to the user's views without a valid
authentication passphrase. (CVE-2008-0960)
John Kortink discovered that the Net-SNMP Perl module did not
correctly check the size of returned values. If a user or automated
system were tricked into querying a malicious SNMP server, the
application using the Perl module could be made to crash, leading to a
denial of service. This did not affect Ubuntu 8.10. (CVE-2008-2292)
It was discovered that the SNMP service did not correctly handle large
GETBULK requests. If an unauthenticated remote attacker sent a
specially crafted request, the SNMP service could be made to crash,
leading to a denial of service. (CVE-2008-4309).
Update the affected packages.
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 8.3
Public Exploit Available : true