Auth bypass in Cisco Ace_10_6504_bundle_with_4_gbps_throughput
CVE-2008-0960
SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network App…
Vulnerability class: Broken Authentication
EPSS: 0.688 (99.3th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ace_10_6504_bundle_with_4_gbps_throughput
- Cisco Ace_10_6509_bundle_with_8_gbps_throughput
- Cisco Ace_10_service_module
- Cisco Ace_20_6504_bundle_with__4gbps_throughput
- Cisco Ace_20_6509_bundle_with_8gbps_throughput
- Cisco Ace_20_service_module
- Cisco Ace_4710
- Cisco Ace_xml_gateway — versions 5.2, 6.0
- Cisco Catos — versions 7.1.1, 7.3.1, 7.4.1
- Cisco Cisco_ios — versions 12.0, 12.1, 12.2
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (x_refsource_CONFIRM, US Government Resource)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
Frequently asked questions
- What is CVE-2008-0960?
- CVE-2008-0960 is a vulnerability in Cisco Ace_10_6504_bundle_with_4_gbps_throughput, classified under Improper Authentication. Published 2008-06-10.
- Is CVE-2008-0960 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.