SNMP upgrade

[José Enrique González]

Hi:

Security Admin's have reported us a server (HP-UX 11.11) running on snmpv1 (OVSnmpAgent installed), with a pottential risk of attacks. I have installed the upgrade patch for snmp (PHSS_27858, consolidated) as indicated by the CERT Advisory, then stopped and started service. However, audit still reports server running on snmpv1. Anything else should be done? What could be missing? Thanks a lot in advance for your comments.

[Mourad Derriche]

The HP-UX standard SNMP daemon supports both SNMP v1 and v2.

The patch does not _upgrade_ the snmp implementation, but patches it.

I dont know why your audit program only reports it as snmpv1, but you would be able to verify it, by using a simple program to walk the snmp tree to get the version.

[KLoeff]

If you put Emanate patch 27858 you must be on OVSNMPAgent 14.2, I have upgraded to OVSNMPAgent 15.3 and when I run the security patch check it still wants me to put on 14.2 patch 27858, HP response was this:

The problem is HPUX SD revision tags for this new product with a 15.3 level of S
NMP have NOT changed from pre 15.3 release.
The fix for 11.x systems. The revision number is changed from B.11.11 to B.11.2
3.01 in NNM 7.01 release when it upgrades the SNMP Agent to 15.3.1.0 along with
NNM 7.01.

If you are on NNM 6.X / VPO 6.X the only fix is to upgrade NNM to 7.X or ignore the patch recommendation from the security check script which is what I am doing.

Kevin