Auth bypass in Net-Snmp
CVE-2008-6123
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
Vulnerability class: Broken Access Control
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.029 (86.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 86th percentile — 86.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.029 · newest: 0.029 · change: -0.000
Affected products
- Net-Snmp
- openSUSE — versions 10.3-11.1, 11.2
- Red Hat Enterprise Linux — versions 3.0
- SUSE Linux Enterprise — versions 9-11
Weakness classification (CWE)
References
- www.openwall.com/lists/oss-security/2009/02/12/2 (mailing-list, Mailing List)
- www.openwall.com/lists/oss-security/2009/02/12/7 (mailing-list, Mailing List)
- bugs.gentoo.org/show_bug.cgi (Exploit, Issue Tracking)
- bugzilla.redhat.com/show_bug.cgi (Patch, Issue Tracking)
- www.openwall.com/lists/oss-security/2009/02/12/4 (mailing-list, Mailing List)
- lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html (vendor-advisory, Mailing List)
- lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html (vendor-advisory, Mailing List)
- www.redhat.com/support/errata/RHSA-2009-0295.html (vendor-advisory, Not Applicable)
- secunia.com/advisories/35685 (Broken Link, third-party-advisory)
- secunia.com/advisories/34499 (Broken Link, third-party-advisory)