[patch] patch for CVE-2008-0960

CVE-2008-0960.patch (text/plain), 404 bytes, created by Matthias Geerdsen (RETIRED) on 2008-06-06 10:51:54 UTC

--- net-snmp-5.4.1/snmplib/scapi.c      2006-09-15 05:47:01.000000000 -0700
+++ net-snmp-5.4.1.1/snmplib/scapi.c    2008-05-13 17:43:17.000000000 -0700
@@ -563,6 +563,10 @@

}


+    if (maclen != USM_MD5_AND_SHA_AUTH_LEN) {
+        QUITFUN(SNMPERR_GENERR, sc_check_keyed_hash_quit);
+    }
+
/*
* Generate a full hash of the message, then compare
* the result with the given MAC which may shorter than