CVE-2009-1887

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 26-06-2009 08:30

Last modified: - 03-02-2022 08:59

Total changes: - 2

Description

agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

None

Confidentiality

None

Integrity

Privileges required

Scope

User interaction

5.0

Base score

10.0

2.9

Exploitability score

Impact score

Verification logic

AND

vendor=net-snmp AND product=net-snmp AND version=5.0.9

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=3.0

Reference

https://bugzilla.redhat.com/show_bug.cgi?id=506903
RHSA-2009:1124-Patch, Vendor Advisory
MDVSA-2009:156-Broken Link
oval:org.mitre.oval:def:9716-Tool Signature
oval:org.mitre.oval:def:8426-Tool Signature

Keywords

CVE-2009-1887

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2009-1887

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures