CVE-2008-6123: net-snmp Incorrect Authorization
Vulnerability summary
CVE-2008-6123 is a medium (CVSS 5.0) Incorrect Authorization vulnerability in net-snmp. EPSS estimates a 2.90% chance of exploitation in the next 30 days, higher than 86.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 12-02-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.90%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
-0.02 pp
From 2.92% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugs.gentoo.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Redhat7 products
- enterprise_linux3.0
- net-snmp< 0:5.0.9-2.30E.27
- net-snmp-debuginfo< 0:5.0.9-2.30E.27
- net-snmp-devel< 0:5.0.9-2.30E.27
- net-snmp-libs< 0:5.0.9-2.30E.27
Debian1 product
- net-snmp< 5.4.3~dfsg-1
Net-snmp1 product
- net-snmp≥ 5.0.9, ≤ 5.4.2.1
Opensuse1 product
- opensuseEOL10.3-11.1 | 11.2
Suse1 product
- linux_enterprise9-11
5 vendors · 11 products
References
23 links- lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.htmlVendor AdvisoryX Refsource SUSEMailing List
- lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.htmlVendor AdvisoryX Refsource SUSEMailing List
Show all 23 references
- lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlVendor AdvisoryX Refsource SUSEMailing List
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10289VDB EntrySignatureX Refsource OVALBroken Link
