CVE-2008-6123 vulnerability in Net Snmp and Other Products
Published on February 12, 2009
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
Products Associated with CVE-2008-6123
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2008-6123 are published in these products:
Exploit Probability
EPSS
0.63%
Percentile
69.92%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.