Bug 119292 – snmpd: stack smashing attack in function netsnmp_udp_transport()

• Product: Gentoo Linux
• Status: RESOLVED INVALID

[Description Edwin Cremer 2006-01-17 08:07:04 UTC]

if I want to start the snmp daemon like

/usr/sbin/snmpd -f

I see

snmpd: stack smashing attack in function netsnmp_udp_transport()

and nothing start. :(

medi ~ # qlop -l net-snmp
Wed Nov 30 22:15:00 2005 >>> net-analyzer/net-snmp-5.2.1.2-r1
Sun Jan 15 13:09:32 2006 >>> net-analyzer/net-snmp-5.2.1.2-r1

both works

Tue Jan 17 14:31:49 2006 >>> net-analyzer/net-snmp-5.2.1.2-r1
Tue Jan 17 15:22:18 2006 >>> net-analyzer/net-snmp-5.2.2

now I see the error


Portage 2.0.53 (default-linux/x86/2005.1, gcc-3.4.4, glibc-2.3.5-r2, 2.6.14-gentoo-r5 i686)
=================================================================
System uname: 2.6.14-gentoo-r5 i686 AMD Athlon(tm) XP 3000+
Gentoo Base System version 1.6.13
dev-lang/python:     2.3.5-r2, 2.4.2
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-mtune=athlon-xp -march=athlon-xp -O3 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /var/bind /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-mtune=athlon-xp -march=athlon-xp -O3 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig ccache distcc distlocks fixpackages pgp sandbox sfperms strict"
GENTOO_MIRRORS="ftp://pandemonium.tiscali.de/pub/gentoo/ ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ ftp://mirror.ovh.net/gentoo-distfiles/ ftp://ftp.gentoo.mesh-solutions.com/gentoo/"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 apache2 bash-completion berkdb bitmap-fonts bzip2 cdr chroot crypt curl eds emboss encode expat gd gif gmp gstreamer hardened hardenedphp imap jpeg mbox md5sum mhash milter mp3 mysql mysqlfriends ncurses no-exercises no-experimental noaudio nocardbus nocd nojoystick nopri noreiserfs nosamples novideo nozaptel ogg oggvorbis pcre perl php png python ruby sasl shaper snmp softquota ssl tcpd truetype-fonts type1-fonts udev vmdbmysql vorbis zlib userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY

[Comment 1 Edwin Cremer 2006-01-18 15:31:54 UTC]

now I find a workarount (but not a solution)
if I compile the paket with -fno-stack-protector the snmpd starts and works

[Comment 2 Benjamin Smee (strerror) (RETIRED) 2006-01-20 14:34:11 UTC]

This is an issue with your toolchain / kernel. 

[Comment 3 Richard Scott 2006-01-25 02:06:40 UTC]

I have had the same problem also, I have also noticed that we are both running Athlon XP systems and this is the first Athlon system I have used in anger with Gentoo, so perhaps this could be a bug with the combination of the hardened profile/kernel and the athlon chip?

As this has happened to more than one person, can we re-open this bug report?

[Comment 4 Richard Scott 2006-01-25 02:10:12 UTC]

ok, cancel the re-open request. I've found this:

http://www.gentoo.org/proj/en/hardened/hardenedfaq.xml#Othreessp

:-)