Updated ucd-snmp packages available

Updated ucd-snmp packages are now available for Red Hat Linux 6.2, 7, 7.1,
and 7.2. These packages prevent possible denial of service attacks and
security breaches as discovered by the Oulu University Secure Programming Group

The Simple Network Management Protocol (SNMP) enables
monitoring and configuration of network nodes.

The Oulu University Secure Programming Group performed
a vulnerability assessment of various SNMP implementations through syntax
testing and test-suite creation.

The test-suite showed several failures in the ucd-snmp tools in version
4.2.2 and earlier. These vulnerabilities can cause denial-of-service
conditions, service interruptions, and in some cases could result in a
remote security breach.

Updated ucd-snmp packages are provided that are not susceptible to these
vulnerabilities and which pass all tests of the test-suite sucessfully.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the names CAN-2002-0012 and CAN-2002-0013 to these issues.

All users of ucd-snmp should upgrade to these errata packages.

For Red Hat Linux 7.2 updated packages for ethereal (a network traffic
analyser that makes use of ucd-snmp) are directly available
via this errata as well. For all previous versions of Red Hat Linux a
separate powertools errata will provide updated ethereal packages.

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains
the
desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

For Red Hat Linux 6.2 you will need to use the following commands to
update your system using up2date:

up2date -u
up2date ucd-snmp ucd-snmp-utils
up2date ucd-snmp-devel ucd-snmp-utils

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0012
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0013
http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/0100.html
http://www.cert.org/advisories/CA-2002-03.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0012
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0013

protos, snmp, suite, test, ucd-snmp