NVD

Id
4137  
Name
CVE-2008-4309  
Description
Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow, related to the number of responses or repeats.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-10-31  
Modified Date
2012-10-29  
Seq
2008-4309  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26376 4137 CVE-2008-4309 APPLE-SA-2009-05-12  View
26377 4137 CVE-2008-4309 APPLE-SA-2010-12-16-1  View
26378 4137 CVE-2008-4309 SUSE-SR:2009:003  View
26379 4137 CVE-2008-4309 HPSBMA02447  View
26380 4137 CVE-2008-4309 http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/tags/Ext-5-2-5-1/net-snmp/agent/snmp_agent.c?r1=17271&r2=17272&pathrev=17272  View
26381 4137 CVE-2008-4309 oval:org.mitre.oval:def:6171  View
26382 4137 CVE-2008-4309 oval:org.mitre.oval:def:6353  View
26383 4137 CVE-2008-4309 oval:org.mitre.oval:def:9860  View
26384 4137 CVE-2008-4309 GLSA-200901-15  View
26385 4137 CVE-2008-4309 http://sourceforge.net/forum/forum.php?forum_id=882903  View
26386 4137 CVE-2008-4309 262908  View
26387 4137 CVE-2008-4309 http://support.apple.com/kb/HT3549  View
26388 4137 CVE-2008-4309 http://support.apple.com/kb/HT4298  View
26389 4137 CVE-2008-4309 http://support.avaya.com/elmodocs2/security/ASA-2008-467.htm  View
26390 4137 CVE-2008-4309 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0315  View
26391 4137 CVE-2008-4309 DSA-1663  View
26392 4137 CVE-2008-4309 MDVSA-2008:225  View
26393 4137 CVE-2008-4309 [oss-security] 20081031 New net-snmp DoS  View
26394 4137 CVE-2008-4309 RHSA-2008:0971  View
26395 4137 CVE-2008-4309 20081112 rPSA-2008-0315-1 net-snmp net-snmp-client net-snmp-server net-snmp-utils  View
26396 4137 CVE-2008-4309 32020  View
26397 4137 CVE-2008-4309 1021129  View
26398 4137 CVE-2008-4309 USN-685-1  View
26399 4137 CVE-2008-4309 TA09-133A  View
26400 4137 CVE-2008-4309 http://www.vmware.com/security/advisories/VMSA-2009-0001.html  View
26401 4137 CVE-2008-4309 ADV-2008-2973  View
26402 4137 CVE-2008-4309 ADV-2008-3400  View
26403 4137 CVE-2008-4309 ADV-2009-0301  View
26404 4137 CVE-2008-4309 ADV-2009-1297  View
26405 4137 CVE-2008-4309 ADV-2009-1771  View
26406 4137 CVE-2008-4309 netsnmp-netsnmpcreatesubtreecache-dos(46262)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46602 JVNDB-2008-001912 net-snmp の netsnmp_create_subtree_cache 関数における整数オーバーフローの脆弱性 net-snmp の netsnmp_create_subtree_cache 関数には、SNMP GETBULK リクエストの処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2008-4309 34422 CVE-2008-4309 4137 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001912.html 2008-10-31 2011-01-11 View