Most probably CPANTS databases are being regenerated from scratch due to major changes in Kwalitee metrics or updates of relevant modules/perl. Usually this maintenance takes about a day or two, and some of the information may be old or missing tentatively. Sorry for the inconvenience.
CVE-2008-2292
Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).
Fixed version: >=6.0.0
Reported: 2008-05-18
CVE-2005-2811
Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure DT_RPATH, which could allow local users to gain privileges.
Reported: 2005-09-07
CVE-2014-2285
The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl.
Reported: 2014-04-27
Add a META.yml to the distribution. Your buildtool should be able to autogenerate it.
Change the permissions of Build.PL/Makefile.PL to not-executable.
List all used modules in META.yml requires
Error:
Make sure that the main module name and version are the same of the distribution.
Add a META.json to the distribution. Your buildtool should be able to autogenerate it.
Define the license if you are using in Build.PL. If you are using MakeMaker (Makefile.PL) you should upgrade to ExtUtils::MakeMaker version 6.31.
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Net::SNMP, Net::SNMP::Dispatcher, Net::SNMP::Message, Net::SNMP::MessageProcessing, Net::SNMP::PDU, Net::SNMP::Security, Net::SNMP::Security::Community, Net::SNMP::Security::USM, Net::SNMP::Transport, Net::SNMP::Transport::TCP, Net::SNMP::Transport::TCP6, Net::SNMP::Transport::UDP, Net::SNMP::Transport::UDP6
Fix the version numbers so that version::is_lax($version) returns true.
Error:
This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.
| Name | Abstract | Version | View |
|---|---|---|---|
| Net::SNMP | Object oriented interface to SNMP | metacpan | |
| Net::SNMP::Dispatcher | metacpan | ||
| Net::SNMP::Message | metacpan | ||
| Net::SNMP::MessageProcessing | metacpan | ||
| Net::SNMP::PDU | metacpan | ||
| Net::SNMP::Security | metacpan | ||
| Net::SNMP::Security::Community | metacpan | ||
| Net::SNMP::Security::USM | metacpan | ||
| Net::SNMP::Transport | metacpan | ||
| Net::SNMP::Transport::TCP | metacpan | ||
| Net::SNMP::Transport::TCP6 | metacpan | ||
| Net::SNMP::Transport::UDP | metacpan | ||
| Net::SNMP::Transport::UDP6 | metacpan |