2008/6/17 SUN LI-WEN-VQB783 <[EMAIL PROTECTED]>:
> I am an employee in Motorola. And we are imformed of the " SECURITY
> RELEASE: Multple Net-SNMP Versions Released", however, we couldn't find the
> patch for the net-snmp-5.2.1. Becuase we are using the version of
> net-snmp-5.2.1, so we wonder if we could get a patch for net-snmp-5.2.1,
> please.
You asked this yesterday.
And in fact, you answered your own question:
> .... could we just add
>
> if (maclen != USM_MD5_AND_SHA_AUTH_LEN) {
> QUITFUN(SNMPERR_GENERR, sc_check_keyed_hash_quit);
> }
>
> to the v5.2.1/snmplib/scapi.c to accomplish the security bug.
Yes - That is exactly what you should do.
(As I said yesterday).
Dave
-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
