Unscored severity · published Feb 12, 2009
CVE-2008-6123
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow…
–
CVSS
2.9%
EPSS
No
On KEV
Description
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
3.0 · source: NVD
LE
Linux Enterprise · Suse
9-11 · source: NVD
NE
Net-snmp · Net-snmp
5.0.9 through 5.4.2.1 · source: NVD
OP
Opensuse · Opensuse
10.3-11.1; 11.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6123
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6123
Exploit
http://bugs.gentoo.org/show_bug.cgi?id=250429
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html
Product
http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/trunk/net-snmp/snmplib/snmpUDPDomain.c?r1=17325&r2=17367&pathrev=17367
Product
http://net-snmp.svn.sourceforge.net/viewvc/net-snmp?view=rev&revision=17367
More from Net-snmp
9.8
CVE-2025-68615
net-snmp is a SNMP application library, tools and daemon
9.8
CVE-2018-1000116
NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution
8.8
CVE-2022-24810
net-snmp provides various tools relating to the Simple Network Management Protocol
8.8
CVE-2022-24805
net-snmp provides various tools relating to the Simple Network Management Protocol
7.8
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root