CVE-2003-0935 — Net-snmp vulnerability

6 documents6 sources
Severity
6.4MEDIUMNVD
EPSS
0.9%
top 24.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Net-snmpDebian Net-snmp
Timeline
PublishedDec 1
Latest updateApr 29

Description

Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages3 packages

▶debiandebian/net-snmp< net-snmp 5.0.9 (bookworm)
▶Debiannet-snmp/net-snmp< 5.0.9+3
▶NVDnet-snmp/net-snmp7 versions+6

Patches

Patch: sourceforge.net ↗Patch: www.redhat.com ↗Patch: sourceforge.net ↗

🔴Vulnerability Details

2
GHSA
GHSA-xm65-9x7h-29gw: Net-SNMP before 5↗2022-04-29
▶
OSV
CVE-2003-0935: Net-SNMP before 5↗2003-12-01
▶

📋Vendor Advisories

2
Red Hat
security flaw↗2003-09-06
▶
Debian
CVE-2003-0935: net-snmp - Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, ...↗2003
▶

💬Community

1
Bugzilla
CVE-2003-0935 security flaw↗2018-08-16
▶