Check Point Advisories

IPS-1 Protection Update for SNMP (Version 21)

Check Point Reference:	CPAI-2007-202
Date Published:	30 Aug 2007
Severity:	Low
Last Updated:	Thursday 11 October, 2007
Source:
Protection Provided by:
Who is Vulnerable?	All IPS-1 customers should apply this signature update.
Vulnerability Description	This release is a maintenance update to SNMP.
Vulnerability Details	This release is a maintenance update to SNMP.  It contains a bugfix for SNMP Community Name guessing detection, which was being triggered mistakenly in situations where certain types of Cisco SNMP community instance extensions were appended to the community name.  These can be recognized by logged guessing attacks in the form of "commname@instance".