Description
fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | net-snmp +4 | 5.1.2-11.EL4.6 | RHSA-2005:395 |
| RHEL 3 | net-snmp +4 | 5.0.9-2.30E.19 | RHSA-2005:373 |
Advisories 2
- RHSA-2005:395 Red Hat Security Advisory: net-snmp security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:373 Red Hat Security Advisory: net-snmp security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 13715 vdb-entry
- GLSA-200505-18 vendor-advisory
- ADV-2005-0598 vdb-entry
- http://www.zataz.net/adviso/net-snmp-05182005.txt
- 15471 third-party-advisory
- 1014039 vdb-entry
- 16778 vdb-entry
- 16999 third-party-advisory
- 18635 third-party-advisory
- oval:org.mitre.oval:def:11659 vdb-entry signature
- MDKSA-2006:025 vendor-advisory
- RHSA-2005:395 vendor-advisory
- RHSA-2005:373 vendor-advisory
- 17135 third-party-advisory