Summary
The remote host is missing an update to ucd-snmp
announced via advisory DSA 111-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20111-1
Insight
The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploits.
New UCD-SNMP packages have been prepared to fix these problems as well as a few others. The complete list of fixed problems is:
* When running external programs snmpd used temporary files insecurely * snmpd did not properly reset supplementary groups after changing its uid and gid
* Modified most code to use buffers instead of fixed-length strings to prevent buffer overflows
* The ASN.1 parser did not check for negative lengths * the IFINDEX response handling in snmpnetstat did not do a sanity check on its input
(thanks to Caldera for most of the work on those patches)
The new version is 4.1.1-2.1 and we recommend you upgrade your snmp packages immediately.