Unscored severity · published Nov 10, 2015
CVE-2015-8100
The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file
–
CVSS
0.5%
EPSS
No
On KEV
Description
The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Net-snmp · Net-snmp
through 5.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-8100
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-8100
packetstormsecurity.com
http://packetstormsecurity.com/files/134323/OpenBSD-net-snmp-Information-Disclosure.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2015/11/09/6
www.securitytracker.com
http://www.securitytracker.com/id/1034099
More from Net-snmp
9.8
CVE-2025-68615
net-snmp is a SNMP application library, tools and daemon
9.8
CVE-2018-1000116
NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution
8.8
CVE-2022-24810
net-snmp provides various tools relating to the Simple Network Management Protocol
8.8
CVE-2022-24805
net-snmp provides various tools relating to the Simple Network Management Protocol
7.8
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root