bugtraq - F5 FirePass 1200 SNMP daemon DoS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 4 Jul 2008 01:29:05 -0000
From: nnposter@...closed.not
To: bugtraq@...urityfocus.com
Subject: F5 FirePass 1200 SNMP daemon DoS

F5 FirePass 1200 SNMP daemon DoS

Product: F5 FirePass 1200
http://www.f5.com/products/firepass/

The F5 FirePass 1200 SSL VPN appliance contains a denial-of-service vulnerability in the SNMP daemon. Traversing (walking) OID branch hrSWInstalled in HOST-RESOURCES-MIB (OID 1.3.6.1.2.1.25.6) will cause the daemon to crash. No analysis has been done to determine if the vulnerability is further exploitable.

The vulnerability has been identified in version 6.0.2, hotfix 3. However, other versions may be also affected.

Solution:
Limit network access to the SNMP daemon.

Found by:
nnposter