SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.
    (CVE-2020-24361)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.
    (CVE-2020-24361)

It was found that SNMP Trap Translator does not drop privileges as configured and does not properly escape shell commands in certain functions. A remote attacker, by sending a malicious crafted SNMP trap, could possibly execute arbitrary shell code with the privileges of the process or cause a Denial of Service condition.

For Debian 9 stretch, this problem has been fixed in version 1.4-1+deb9u1.

We recommend that you upgrade your snmptt packages.

For the detailed security status of snmptt please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/snmptt

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202007-63 (SNMP Trap Translator: Multiple vulnerabilities)

    It was found that SNMP Trap Translator does not drop privileges as       configured and does not properly escape shell commands in certain       functions.
  Impact :

    A remote attacker, by sending a malicious crafted SNMP trap, could       possibly execute arbitrary shell code with the privileges of the process       or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Type	Severity
255710	Linux Distros Unpatched Vulnerability : CVE-2020-24361	Nessus	Misc.	Local	critical
424495	Alpine: multiple snmptt packages: security update to 1.4.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	critical
424495	Alpine: multiple snmptt packages: security update to 1.4.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	critical
141135	Debian DLA-2393-1 : snmptt security update	Nessus	Debian Local Security Checks	Local	critical
139271	GLSA-202007-63 : SNMP Trap Translator: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical

Detections

Analytics

CVE-2020-24361

critical

Tenable Plugins

critical

critical

critical

critical

critical