Subject: Re: snmp vulnerability
To: Steve Bellovin <smb@research.att.com>
From: Bill Studenmund <wrstuden@netbsd.org>
List: tech-security
Date: 02/13/2002 10:26:49
On Tue, 12 Feb 2002, Steve Bellovin wrote:

> CERT has announced a widespread SNMP vulnerability; see
> http://www.cert.org/advisories/CA-2002-03.html
> As of now, we do not seem to have a fixed version in pkgsrc.

The ucd-snmp-current package was fixed for those advisories.

As of today, the ucd-snmp package has been updated to what was the
ucd-snmp-current package, with one additional security fix. Work was done
by tron@netbsd.org. :-)

Take care,

Bill