-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
$B3F0L(B
JPCERT-AT-2008-0011
JPCERT/CC
2008-06-11
<<< JPCERT/CC Alert 2008-06-11 >>>
SNMPv3 $B$rZ2sHr$N@HZ$r2sHr$5$l$k@HZ5!G=$K$h(B
$B$jJ]8n$5$l$F$$$k5!4o$N@_Dj>pJs$,O31L$7$?$j!"Bh;0](B
Cisco $B@=IJ!"(BJuniper $B@=IJ!"(BNET-SNMP$B!"(BUCD-SNMP $B$J$I$G(B SNMPv3 $B$NG'>Z5!(B
$BG=$rMxMQ$7$F$$$k>l9g!"$3$NLdBj$N1F6A$r\:Y$K4X$7$^$7$F$O!"0J2<$NJ8=q$r;2>H$7$F$/$@$5$$!#$^$?!"$3$l$i$NJ8=q(B
$B$K5-:\$5$l$F$$$J$$@=IJ$d%7%9%F%`$K$D$$$F$O!"%Y%s%@$dG[I[85$N(B Web $B%Z!<(B
$B%8$J$I$r$4Mw$/$@$5$$!#(B
Cisco Security Advisory:SNMP Version 3 Authentication Vulnerabilities
http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml
NET-SNMP, UCD-SNMP
oCERT.org - oCERT Advisories
http://www.ocert.org/advisories/ocert-2008-006.html
III. $BBP:v(B
$B3F%Y%s%@$dG[I[85$NDs6!$9$k%Q%C%A$rE,MQ$7$F$/$@$5$$!#%Q%C%A$K4X$9$k:G(B
$B?7$N>pJs$K$D$$$F$O!"2<5-(B CERT/CC $B$d%Y%s%@$J$I$,8x3+$7$F$$$k>pJs$r;2>H(B
$B$7$F$/$@$5$$!#(B
$B%Q%C%A$rE,MQ$9$k$N$,:$Fq$J>l9g!"$b$7$/$O%Q%C%A$,8x3+$5$l$F$$$J$$>l9g(B
$B$O!"%k!<%?$J$I$N%Q%1%C%H%U%#%k%?%j%s%05!G=$K$h$j!"(BSNMP $B%5!<%S%9$X$N%"(B
$B%/%;%9$r@)8B$9$kJ}K!$J$I$,$"$j$^$9!#(B
(SNMP $B%5!<%S%9$GMxMQ$5$l$k%]!<%H$O(B 161/udp $B$,0lHLE*$G$9$,!"@=IJ$K$h$C$F(B
$B0[$J$j$^$9!#(B)
IV. $B;29M>pJs(B
JVNTA08-162A
SNMPv3 $B$K$*$1$kG'>Z2sHr$N@HZ2sHr$N@HpJs$,$4$6$$$^$7$?$i!"$4O"(B
$BMm$/$@$5$$!#(B
======================================================================
JPCERT $B%3!<%G%#%M!<%7%g%s%;%s%?!<(B (JPCERT/CC)
MAIL: [email protected]
TEL: 03-3518-4600 FAX: 03-3518-4602
http://www.jpcert.or.jp/
-----BEGIN PGP SIGNATURE-----
iQCVAwUBSE9tY4x1ay4slNTtAQi2AwP+NMyoPnrUTThgOxafGXWelCQMMzVu8S7u
0svS4Bcjuy1exxT5tt24zv18NZaBK7DviswVz3Z9wBEmlZnONvFB4+zsyOQ7IVAB
/TmSuroTelvC2fvEhFpf9Sdh3vIfrspKw/yrWdX2lP2DTB5/3kzYEmIBmQoaND9V
uyAU6TocG+Y=
=EcTw
-----END PGP SIGNATURE-----