Auth bypass in Net-Snmp
CVE-2008-6123
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
Vulnerability class: Broken Access Control
EPSS: 0.029 (85.6th percentile) — read the EPSS interpretation.
Affected products
- Net-snmp
- Opensuse — versions 10.3-11.1, 11.2
- Redhat Enterprise_linux — versions 3.0
- Suse Linux_enterprise — versions 9-11
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List)
- cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List)
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Issue Tracking)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking)
- cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List)
- cve@mitre.org (vendor-advisory, Mailing List, x_refsource_SUSE)
- cve@mitre.org (vendor-advisory, Mailing List, x_refsource_SUSE)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Not Applicable)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)