Synopsis

net-snmp security update

Type/Severity

Security Advisory: Low

Topic

Updated net-snmp packages that fix two security issues and various bugs
are now available.

This update has been rated as having low security impact by the Red Hat
Security Response Team.

Description

SNMP (Simple Network Management Protocol) is a protocol used for network
management.

A denial of service bug was found in the way net-snmp uses network stream
protocols. It is possible for a remote attacker to send a net-snmp agent a
specially crafted packet that will crash the agent. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-2177 to this issue.

An insecure temporary file usage bug was found in net-snmp's fixproc
command. It is possible for a local user to modify the content of temporary
files used by fixproc that can lead to arbitrary command execution. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2005-1740 to this issue.

Additionally, the following bugs have been fixed:

• The lmSensors are correctly recognized, snmp deamon no longer segfaults
  
• The larger swap partition sizes are correctly reported
  
• Querying hrSWInstalledLastUpdateTime no longer crashes the snmp deamon
  
• Fixed error building ASN.1 representation
  
• The 64-bit network counters correctly wrap
  
• Large file systems are correctly handled
  
• Snmptrapd initscript correctly reads options from its configuration
  file /etc/snmp/snmptrapd.options
  
• Snmp deamon no longer crashes when restarted using the agentX
  protocol
  
• snmp daemon now reports gigabit Ethernet speeds correctly
  
• MAC adresses are shown when requested instead of IP adresses
  

All users of net-snmp should upgrade to these updated packages, which
resolve these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains the
desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

If up2date fails to connect to Red Hat Network due to SSL
Certificate Errors, you need to install a version of the
up2date client with an updated certificate. The latest version of
up2date is available from the Red Hat FTP site and may also be
downloaded directly from the RHN website:

https://rhn.redhat.com/help/latest-up2date.pxt

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 150084 - snmpd dies when getting enterprises.ucdavis.memory.memTotalSwap.0
• BZ - 150199 - snmpd exits without a diagnostic: SIGSEGV
• BZ - 154455 - 64bit network counters peg instead of wrapping
• BZ - 154798 - /etc/init.d/snmptrapd wrong order in setting variables...
• BZ - 155038 - x86_64: net-snmp dies when querying hrSWInstalledLastUpdateTime
• BZ - 158769 - CAN-2005-1740 net-snmp insecure temporary file usage
• BZ - 163688 - CAN-2005-2177 net-snmp denial of service

CVEs

• CVE-2005-2177
• CVE-2005-1740
• CVE-2005-4837

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
net-snmp-5.1.2-11.EL4.6.src.rpm	SHA-256: ce4e6cab70530d4940c34138a046d1be1d18e5cf72c93a2afc3db08b42591b8c
x86_64
net-snmp-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 427f620b3919724a580cfeb41d2560ceb5426f894433ce4ab58c908f129f7047
net-snmp-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 427f620b3919724a580cfeb41d2560ceb5426f894433ce4ab58c908f129f7047
net-snmp-devel-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: ef57c5df4ef65f54eb9ebf422849e8e69f6a464758a4bedb34ac583b7d409806
net-snmp-devel-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: ef57c5df4ef65f54eb9ebf422849e8e69f6a464758a4bedb34ac583b7d409806
net-snmp-libs-5.1.2-11.EL4.6.i386.rpm	SHA-256: 62582c636e41b8d93d3d6a48b4b143e14ebf14371aa495a6a636d9120b8fb55f
net-snmp-libs-5.1.2-11.EL4.6.i386.rpm	SHA-256: 62582c636e41b8d93d3d6a48b4b143e14ebf14371aa495a6a636d9120b8fb55f
net-snmp-libs-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 128f563a5dae569d72b4319b38b48c9e9a25f59c7b21a83d63b272f875c9e07c
net-snmp-libs-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 128f563a5dae569d72b4319b38b48c9e9a25f59c7b21a83d63b272f875c9e07c
net-snmp-perl-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 28368dcfc645a91238812019f7f8d7c8ff03f5dfaf65bc31824776504146cb57
net-snmp-perl-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 28368dcfc645a91238812019f7f8d7c8ff03f5dfaf65bc31824776504146cb57
net-snmp-utils-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 3f75f1e0b08b1b79f2d2ebd9204296e3d98e21ec54e9e9f4f6423fa9ce14f95f
net-snmp-utils-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 3f75f1e0b08b1b79f2d2ebd9204296e3d98e21ec54e9e9f4f6423fa9ce14f95f
ia64
net-snmp-5.1.2-11.EL4.6.ia64.rpm	SHA-256: 73c0cc4c213c740616df00a519f6566584562d98be0b8467886f68b63bd62304
net-snmp-5.1.2-11.EL4.6.ia64.rpm	SHA-256: 73c0cc4c213c740616df00a519f6566584562d98be0b8467886f68b63bd62304
net-snmp-devel-5.1.2-11.EL4.6.ia64.rpm	SHA-256: 9e24f6fb65692b49afc875c4763eaf31ce4737ff8281f94945213c6305eb31f5
net-snmp-devel-5.1.2-11.EL4.6.ia64.rpm	SHA-256: 9e24f6fb65692b49afc875c4763eaf31ce4737ff8281f94945213c6305eb31f5
net-snmp-libs-5.1.2-11.EL4.6.i386.rpm	SHA-256: 62582c636e41b8d93d3d6a48b4b143e14ebf14371aa495a6a636d9120b8fb55f
net-snmp-libs-5.1.2-11.EL4.6.i386.rpm	SHA-256: 62582c636e41b8d93d3d6a48b4b143e14ebf14371aa495a6a636d9120b8fb55f
net-snmp-libs-5.1.2-11.EL4.6.ia64.rpm	SHA-256: c509d980e47d19a2d302fd8b127ea2b57f43ff7cc8aabadf814bd86fe253d951
net-snmp-libs-5.1.2-11.EL4.6.ia64.rpm	SHA-256: c509d980e47d19a2d302fd8b127ea2b57f43ff7cc8aabadf814bd86fe253d951
net-snmp-perl-5.1.2-11.EL4.6.ia64.rpm	SHA-256: 18466f7d5da3f4a30fbef9398756ce646156f93bcbaea5052896664733e7ea1c
net-snmp-perl-5.1.2-11.EL4.6.ia64.rpm	SHA-256: 18466f7d5da3f4a30fbef9398756ce646156f93bcbaea5052896664733e7ea1c
net-snmp-utils-5.1.2-11.EL4.6.ia64.rpm	SHA-256: dfa2bb914e642a67792863267e26ae2383deb63c235dd9b5e8f47604643b28f3
net-snmp-utils-5.1.2-11.EL4.6.ia64.rpm	SHA-256: dfa2bb914e642a67792863267e26ae2383deb63c235dd9b5e8f47604643b28f3
i386
net-snmp-5.1.2-11.EL4.6.i386.rpm	SHA-256: 802c594b15dfd74832c993f5109e27b51195fa51888ea3d4f41e2c6dcea005e0
net-snmp-5.1.2-11.EL4.6.i386.rpm	SHA-256: 802c594b15dfd74832c993f5109e27b51195fa51888ea3d4f41e2c6dcea005e0
net-snmp-devel-5.1.2-11.EL4.6.i386.rpm	SHA-256: a42808a4c4d4c8496680c588ada76334ee9fbe40bb2820b2a964018a9e784ada
net-snmp-devel-5.1.2-11.EL4.6.i386.rpm	SHA-256: a42808a4c4d4c8496680c588ada76334ee9fbe40bb2820b2a964018a9e784ada
net-snmp-libs-5.1.2-11.EL4.6.i386.rpm	SHA-256: 62582c636e41b8d93d3d6a48b4b143e14ebf14371aa495a6a636d9120b8fb55f
net-snmp-libs-5.1.2-11.EL4.6.i386.rpm	SHA-256: 62582c636e41b8d93d3d6a48b4b143e14ebf14371aa495a6a636d9120b8fb55f
net-snmp-perl-5.1.2-11.EL4.6.i386.rpm	SHA-256: 120dffaa5cf38f03c8746b2f42537722a682d52315fb07613d45f0bde5016f29
net-snmp-perl-5.1.2-11.EL4.6.i386.rpm	SHA-256: 120dffaa5cf38f03c8746b2f42537722a682d52315fb07613d45f0bde5016f29
net-snmp-utils-5.1.2-11.EL4.6.i386.rpm	SHA-256: 4414e7734804b65f917ed6baf7cb9b31c12a5cb9f054ea37312de043f269cf9c
net-snmp-utils-5.1.2-11.EL4.6.i386.rpm	SHA-256: 4414e7734804b65f917ed6baf7cb9b31c12a5cb9f054ea37312de043f269cf9c

Red Hat Enterprise Linux Workstation 4

SRPM
net-snmp-5.1.2-11.EL4.6.src.rpm	SHA-256: ce4e6cab70530d4940c34138a046d1be1d18e5cf72c93a2afc3db08b42591b8c
x86_64
net-snmp-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 427f620b3919724a580cfeb41d2560ceb5426f894433ce4ab58c908f129f7047
net-snmp-devel-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: ef57c5df4ef65f54eb9ebf422849e8e69f6a464758a4bedb34ac583b7d409806
net-snmp-libs-5.1.2-11.EL4.6.i386.rpm	SHA-256: 62582c636e41b8d93d3d6a48b4b143e14ebf14371aa495a6a636d9120b8fb55f
net-snmp-libs-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 128f563a5dae569d72b4319b38b48c9e9a25f59c7b21a83d63b272f875c9e07c
net-snmp-perl-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 28368dcfc645a91238812019f7f8d7c8ff03f5dfaf65bc31824776504146cb57
net-snmp-utils-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 3f75f1e0b08b1b79f2d2ebd9204296e3d98e21ec54e9e9f4f6423fa9ce14f95f
ia64
net-snmp-5.1.2-11.EL4.6.ia64.rpm	SHA-256: 73c0cc4c213c740616df00a519f6566584562d98be0b8467886f68b63bd62304
net-snmp-devel-5.1.2-11.EL4.6.ia64.rpm	SHA-256: 9e24f6fb65692b49afc875c4763eaf31ce4737ff8281f94945213c6305eb31f5
net-snmp-libs-5.1.2-11.EL4.6.i386.rpm	SHA-256: 62582c636e41b8d93d3d6a48b4b143e14ebf14371aa495a6a636d9120b8fb55f
net-snmp-libs-5.1.2-11.EL4.6.ia64.rpm	SHA-256: c509d980e47d19a2d302fd8b127ea2b57f43ff7cc8aabadf814bd86fe253d951
net-snmp-perl-5.1.2-11.EL4.6.ia64.rpm	SHA-256: 18466f7d5da3f4a30fbef9398756ce646156f93bcbaea5052896664733e7ea1c
net-snmp-utils-5.1.2-11.EL4.6.ia64.rpm	SHA-256: dfa2bb914e642a67792863267e26ae2383deb63c235dd9b5e8f47604643b28f3
i386
net-snmp-5.1.2-11.EL4.6.i386.rpm	SHA-256: 802c594b15dfd74832c993f5109e27b51195fa51888ea3d4f41e2c6dcea005e0
net-snmp-devel-5.1.2-11.EL4.6.i386.rpm	SHA-256: a42808a4c4d4c8496680c588ada76334ee9fbe40bb2820b2a964018a9e784ada
net-snmp-libs-5.1.2-11.EL4.6.i386.rpm	SHA-256: 62582c636e41b8d93d3d6a48b4b143e14ebf14371aa495a6a636d9120b8fb55f
net-snmp-perl-5.1.2-11.EL4.6.i386.rpm	SHA-256: 120dffaa5cf38f03c8746b2f42537722a682d52315fb07613d45f0bde5016f29
net-snmp-utils-5.1.2-11.EL4.6.i386.rpm	SHA-256: 4414e7734804b65f917ed6baf7cb9b31c12a5cb9f054ea37312de043f269cf9c

Red Hat Enterprise Linux Desktop 4

SRPM
net-snmp-5.1.2-11.EL4.6.src.rpm	SHA-256: ce4e6cab70530d4940c34138a046d1be1d18e5cf72c93a2afc3db08b42591b8c
x86_64
net-snmp-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 427f620b3919724a580cfeb41d2560ceb5426f894433ce4ab58c908f129f7047
net-snmp-devel-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: ef57c5df4ef65f54eb9ebf422849e8e69f6a464758a4bedb34ac583b7d409806
net-snmp-libs-5.1.2-11.EL4.6.i386.rpm	SHA-256: 62582c636e41b8d93d3d6a48b4b143e14ebf14371aa495a6a636d9120b8fb55f
net-snmp-libs-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 128f563a5dae569d72b4319b38b48c9e9a25f59c7b21a83d63b272f875c9e07c
net-snmp-perl-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 28368dcfc645a91238812019f7f8d7c8ff03f5dfaf65bc31824776504146cb57
net-snmp-utils-5.1.2-11.EL4.6.x86_64.rpm	SHA-256: 3f75f1e0b08b1b79f2d2ebd9204296e3d98e21ec54e9e9f4f6423fa9ce14f95f
i386
net-snmp-5.1.2-11.EL4.6.i386.rpm	SHA-256: 802c594b15dfd74832c993f5109e27b51195fa51888ea3d4f41e2c6dcea005e0
net-snmp-devel-5.1.2-11.EL4.6.i386.rpm	SHA-256: a42808a4c4d4c8496680c588ada76334ee9fbe40bb2820b2a964018a9e784ada
net-snmp-libs-5.1.2-11.EL4.6.i386.rpm	SHA-256: 62582c636e41b8d93d3d6a48b4b143e14ebf14371aa495a6a636d9120b8fb55f
net-snmp-perl-5.1.2-11.EL4.6.i386.rpm	SHA-256: 120dffaa5cf38f03c8746b2f42537722a682d52315fb07613d45f0bde5016f29
net-snmp-utils-5.1.2-11.EL4.6.i386.rpm	SHA-256: 4414e7734804b65f917ed6baf7cb9b31c12a5cb9f054ea37312de043f269cf9c

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
net-snmp-5.1.2-11.EL4.6.src.rpm	SHA-256: ce4e6cab70530d4940c34138a046d1be1d18e5cf72c93a2afc3db08b42591b8c
s390x
net-snmp-5.1.2-11.EL4.6.s390x.rpm	SHA-256: a4ea493bb65d9e778b1293336a512e9df0dcb3da09eb24dbe01df899a5f289a6
net-snmp-devel-5.1.2-11.EL4.6.s390x.rpm	SHA-256: 809f2f647eda56f6a37b136e4de4ab078850db6fddc90f7472fe1528b6479e92
net-snmp-libs-5.1.2-11.EL4.6.s390.rpm	SHA-256: f05fb6e93529fa540774070276b19482600bbc71d2e5ac8cd157a3357f15b391
net-snmp-libs-5.1.2-11.EL4.6.s390x.rpm	SHA-256: 57b59b296e1ed5d704d2d543d7e125f682ab170667bf2d2148f54756d167e206
net-snmp-perl-5.1.2-11.EL4.6.s390x.rpm	SHA-256: 628980d8b8840bbb33a372df3caadce3969c7486c3099aa8d7d87fb026ecc39f
net-snmp-utils-5.1.2-11.EL4.6.s390x.rpm	SHA-256: b493a8f83c9cf0e86f4cc76dfe109fa842ff34c98364e00a634541303654797e
s390
net-snmp-5.1.2-11.EL4.6.s390.rpm	SHA-256: 6c0891cd09ff57ad442df78c72387f78e68e1c0762b0b96c672a73c461bd8cea
net-snmp-devel-5.1.2-11.EL4.6.s390.rpm	SHA-256: a1e47dbc5fde13ddc3212bbdf39f82c0d5088c1e6244ff78420ca9d24396a0cd
net-snmp-libs-5.1.2-11.EL4.6.s390.rpm	SHA-256: f05fb6e93529fa540774070276b19482600bbc71d2e5ac8cd157a3357f15b391
net-snmp-perl-5.1.2-11.EL4.6.s390.rpm	SHA-256: c20501443bf35102bf42766138f7ca5c4af250d43ed67826c256f684ccb1327a
net-snmp-utils-5.1.2-11.EL4.6.s390.rpm	SHA-256: ce2e276e10981472fb6206dec3bb9d990d7d259ef3503fb0eefeabbd920fceee

Red Hat Enterprise Linux for Power, big endian 4

SRPM
net-snmp-5.1.2-11.EL4.6.src.rpm	SHA-256: ce4e6cab70530d4940c34138a046d1be1d18e5cf72c93a2afc3db08b42591b8c
ppc
net-snmp-5.1.2-11.EL4.6.ppc.rpm	SHA-256: d01f54d55d7738a406765e33484b6bf6dd344eaf533c9f0f388eccb7b17695ad
net-snmp-devel-5.1.2-11.EL4.6.ppc.rpm	SHA-256: f19dd68800e11402007891afdb4823f0a495b493fa981c760651b8cd4957b2c5
net-snmp-libs-5.1.2-11.EL4.6.ppc.rpm	SHA-256: ddf11dcf98af32c3c9b1c24ed49c1ee0aeebc61be295bfdfc456f4c2a23f9fc1
net-snmp-libs-5.1.2-11.EL4.6.ppc64.rpm	SHA-256: 87ef2ec0a8c3b64b1dd770f6e9493c0674196f8d809e2a904f0110674eb617ea
net-snmp-perl-5.1.2-11.EL4.6.ppc.rpm	SHA-256: ac6b3187f30dda2c414af14ec46531efbd57c22abfafd01638895a6e9377e01c
net-snmp-utils-5.1.2-11.EL4.6.ppc.rpm	SHA-256: 31874f6f00e5a59b89387ccccd23fb52de910e993463757ccd102dad3f51cdae