CVE-2008-6123

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not…

published February 12, 2009

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02896 · 86.7th percentile
Published
2009-02-12T16:00Z
EPSS history
Timeline
  • 12 FEB 16:00Z
    The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not…
    cvelistv5