CVE-2008-6123
published 2009-02-12CVE-2008-6123: The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not…
PriorityP430medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
2.92%
85.5th percentile
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | net-snmp | < net-snmp 5.4.3~dfsg-1 (bookworm) | net-snmp 5.4.3~dfsg-1 (bookworm) |
| net-snmp | net-snmp | >= 0 < 5.4.3~dfsg-1 | 5.4.3~dfsg-1 |
| net-snmp | net-snmp | >= 0 < 5.4.3~dfsg-1 | 5.4.3~dfsg-1 |
| net-snmp | net-snmp | >= 0 < 5.4.3~dfsg-1 | 5.4.3~dfsg-1 |
| net-snmp | net-snmp | >= 0 < 5.4.3~dfsg-1 | 5.4.3~dfsg-1 |
| net-snmp | net-snmp | 5.0.9 – 5.4.2.1 | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| redhat | enterprise_linux | — | — |
| suse | linux_enterprise | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.0MEDIUM
vendor_debian5.0LOW
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Net-SNMP vulnerability
vendor_ubuntu·2010-06-02
CVE-2008-6123 Net-SNMP vulnerability
Title: Net-SNMP vulnerability
Summary: UDP clients might be able to bypass access restrictions of the SNMP server.
The SNMP server did not correctly validate certain UDP clients when using
TCP wrappers. Under some situations, a remote attacker could bypass
access restrictions and communicate with the SNMP server, potentially
leading to a loss of privacy or a denial of service.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
net-snmp: incorrect application of hosts access restrictions in hosts.{allow,deny}
vendor_redhat·2008-12-09·CVSS 5.0
CVE-2008-6123 [MEDIUM] net-snmp: incorrect application of hosts access restrictions in hosts.{allow,deny}
net-snmp: incorrect application of hosts access restrictions in hosts.{allow,deny}
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
Debian
CVE-2008-6123: net-snmp - The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 thr...
vendor_debian·2008·CVSS 5.0
CVE-2008-6123 [MEDIUM] CVE-2008-6123: net-snmp - The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 thr...
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
Scope: local
bookworm: resolved (fixed in 5.4.3~dfsg-1)
bullseye: resolved (fixed in 5.4.3~dfsg-1)
forky: resolved (fixed in 5.4.3~dfsg-1)
sid: resolved (fixed in 5.4.3~dfsg-1)
trixie: resolved (fixed in 5.4.3~dfsg-1)
GHSA
GHSA-85rg-g6cg-264m: The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain
ghsa_unreviewed·2022-05-17
CVE-2008-6123 [MEDIUM] CWE-20 GHSA-85rg-g6cg-264m: The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
OSV
CVE-2008-6123: The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain
osv·2009-02-12·CVSS 5.0
CVE-2008-6123 [MEDIUM] CVE-2008-6123: The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
No detection rules found.
No public exploits indexed.
CWE
Incorrect Authorization
mitre_cwe
CWE-863 Incorrect Authorization
CWE-863: Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Background: An access control list (ACL) represents who/what has permissions to a given object. Different operating systems implement (ACLs) in different ways. In UNIX, there are three types of permissions: read, write, and execute. Users are divided into three classes for file access: owner, group owner, and all other users where each class has a separate set of rights. In Windows NT, there are four basic types of permissions for files: "No access", "Read access", "Change access", and "Full control". Windows NT extends the concept of three types of users in UNIX to include a list of users and groups al
CWE
Improper Authorization
mitre_cwe
CWE-285 Improper Authorization
CWE-285: Improper Authorization
The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
Background: An access control list (ACL) represents who/what has permissions to a given object. Different operating systems implement (ACLs) in different ways. In UNIX, there are three types of permissions: read, write, and execute. Users are divided into three classes for file access: owner, group owner, and all other users where each class has a separate set of rights. In Windows NT, there are four basic types of permissions for files: "No access", "Read access", "Change access", and "Full control". Windows NT extends the concept of three types of users in UNIX to include a list of users and groups along with their
CWE
Missing Authorization
mitre_cwe
CWE-862 Missing Authorization
CWE-862: Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Background: An access control list (ACL) represents who/what has permissions to a given object. Different operating systems implement (ACLs) in different ways. In UNIX, there are three types of permissions: read, write, and execute. Users are divided into three classes for file access: owner, group owner, and all other users where each class has a separate set of rights. In Windows NT, there are four basic types of permissions for files: "No access", "Read access", "Change access", and "Full control". Windows NT extends the concept of three types of users in UNIX to include a list of users and groups along with their associated permissions.
http://bugs.gentoo.org/show_bug.cgi?id=250429http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.htmlhttp://net-snmp.svn.sourceforge.net/viewvc/net-snmp/trunk/net-snmp/snmplib/snmpUDPDomain.c?r1=17325&r2=17367&pathrev=17367http://net-snmp.svn.sourceforge.net/viewvc/net-snmp?view=rev&revision=17367http://secunia.com/advisories/34499http://secunia.com/advisories/35416http://secunia.com/advisories/35685http://www.openwall.com/lists/oss-security/2009/02/12/2http://www.openwall.com/lists/oss-security/2009/02/12/4http://www.openwall.com/lists/oss-security/2009/02/12/7http://www.redhat.com/support/errata/RHSA-2009-0295.htmlhttp://www.securitytracker.com/id?1021921https://bugzilla.redhat.com/show_bug.cgi?id=485211https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10289http://bugs.gentoo.org/show_bug.cgi?id=250429http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.htmlhttp://net-snmp.svn.sourceforge.net/viewvc/net-snmp/trunk/net-snmp/snmplib/snmpUDPDomain.c?r1=17325&r2=17367&pathrev=17367http://net-snmp.svn.sourceforge.net/viewvc/net-snmp?view=rev&revision=17367http://secunia.com/advisories/34499http://secunia.com/advisories/35416http://secunia.com/advisories/35685http://www.openwall.com/lists/oss-security/2009/02/12/2http://www.openwall.com/lists/oss-security/2009/02/12/4http://www.openwall.com/lists/oss-security/2009/02/12/7http://www.redhat.com/support/errata/RHSA-2009-0295.htmlhttp://www.securitytracker.com/id?1021921https://bugzilla.redhat.com/show_bug.cgi?id=485211https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10289
2009-02-12
Published