CVE-2008-6123
- State
- Published
- Severity
- Not scored
- Published
- Feb 12, 2009
- Updated
- Aug 7, 2024
- Reserved
- Feb 12, 2009
Description
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20090212 CVE Request -- net-snmp (sensitive host information disclosure)mailing-list
- [oss-security] 20090212 Re: CVE Request -- net-snmp (sensitive host information disclosure)mailing-list
- http://bugs.gentoo.org/show_bug.cgi?id=250429
- https://bugzilla.redhat.com/show_bug.cgi?id=485211
- [oss-security] Re: 20090212 CVE Request -- net-snmp (sensitive host information disclosure)mailing-list
- SUSE-SR:2009:011vendor-advisory
- SUSE-SR:2010:003vendor-advisory
- RHSA-2009:0295vendor-advisory
- 35685third-party-advisory
- 34499third-party-advisory
- SUSE-SR:2009:012vendor-advisory
- 35416third-party-advisory
- http://net-snmp.svn.sourceforge.net/viewvc/net-snmp?view=rev&revision=17367
- oval:org.mitre.oval:def:10289vdb-entrysignature
- 1021921vdb-entry
- http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/trunk/net-snmp/snmplib/snmpUDPDomain.c?r1=17325&r2=17367&pathrev=17367
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.