Public bug reported:

As 5.7.3+dfsg-1.8ubuntu3.5 released, it makes the extend mib read-only
in order to solve CVE-2020-15862.

However, it also makes nsExtendCacheTime cannot be modified anymore.

$ snmpset -v1 -c xxx localhost 
"NET-SNMP-EXTEND-MIB::nsExtendCacheTime.\"test\"" i 0
Error in packet.
Reason: (genError) A general failure occured
Failed object: NET-SNMP-EXTEND-MIB::nsExtendCacheTime."test"

As the nsExtendCacheTime cannot be set in snmpd.conf until 5.8, we can
never configure it.

IMHO, the patch https://sourceforge.net/p/net-snmp/patches/1290/ should
also be introduced along with the patch for CVE-2020-15862, so that we
can configure nsExtendCacheTime in snmpd.conf.

https://github.com/net-snmp/net-
snmp/commit/d8b12900629ed73a78b27535f08c4f0a721a93be

** Affects: net-snmp (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892980

Title:
  NET-SNMP-EXTEND-MIB::nsExtendCacheTime cannot be set anymore

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1892980/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to