RE: Netsnmpv5.8 possible security flaw

2019-01-21 Thread Madhusudhana R
Hi Robert, I checked Wes's theory and 'YES' it is defaulting to 'auth' when no explicit mandate for encryption is done. In vacm_create_simple() function, below code defaults to 'auth' when 'priv' token is not explicitly mentioned. if (cp && *cp) cp = copy_nword(cp, auth

SNMPv3 GET/SET issue due to OpenSSL dependency

2019-01-21 Thread prabu varadharajan
Dear All, I'm using Net-SNMP-5.4.4 package with OpenWRT SDK to develop my Agent for Armv7l. While building the image in a build server(Alice) I'm facing one issue like *SNMPv3 Requests with AES/DES are not working properly*. And I observed that the summary states the Agent is not configured with