CVE-2008-6123 json
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorizat…
published 2009-02-12 17 y ago modified 2026-06-16 4 mo ago also EUVD-2008-6093
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.9%
- EPSS 2.9% chance of exploitation in 30 days, percentile 87%
- public exploits
- 0
- none known
Summary
The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."
Patch / fix
- net-snmp Debian 14, Debian 13, Debian 12 5.4.3~dfsg-1
debian advisories DEBIAN-CVE-2008-6123
- net-snmp RHEL 3 5.0.9-2.30E.27
- net-snmp-libs RHEL 3 5.0.9-2.30E.27
- net-snmp-perl RHEL 3 5.0.9-2.30E.27
- net-snmp-utils RHEL 3 5.0.9-2.30E.27
red hat advisories RHSA-2009:0295
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2008-6123 updated
net-snmp: incorrect application of hosts access restrictions in hosts.{allow,deny}
-
Red Hat Desktop version 3 net-snmp 5.0.9-2.30E.27, net-snmp-libs 5.0.9-2.30E.27, net-snmp-perl 5.0.9-2.30E.27, net-snmp-utils 5.0.9-2.30E.27 Red Hat Enterprise Linux AS version 3 net-snmp 5.0.9-2.30E.27, net-snmp-libs 5.0.9-2.30E.27, net-snmp-perl 5.0.9-2.30E.27, net-snmp-utils 5.0.9-2.30E.27 Red Hat Enterprise Linux ES version 3 net-snmp 5.0.9-2.30E.27, net-snmp-libs 5.0.9-2.30E.27, net-snmp-perl 5.0.9-2.30E.27, net-snmp-utils 5.0.9-2.30E.27 Red Hat Enterprise Linux WS version 3 net-snmp 5.0.9-2.30E.27, net-snmp-libs 5.0.9-2.30E.27, net-snmp-perl 5.0.9-2.30E.27, net-snmp-utils 5.0.9-2.30E.27fixed: vendor fix RHSA-2009:0295
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
2.90% chance of exploitation in the next 30 days, higher than 87% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- bugs.gentoo.org http://bugs.gentoo.org/show_bug.cgi?id=250429 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Weakness
-
- CWE-863 Incorrect Authorization
References
-
bugzilla.redhat.com
/show_bug.cgi?id=485211
issue-tracking, patch
-
bugs.gentoo.org
/show_bug.cgi?id=250429
exploit, issue-tracking
-
lists.opensuse.org
/opensuse-security-announce/2009-06/msg00003.html
vendor-advisory, mailing-list
-
lists.opensuse.org
/opensuse-security-announce/2010-02/msg00003.html
vendor-advisory, mailing-list
-
redhat.com
/support/errata/RHSA-2009-0295.html
vendor-advisory, not-applicable
-
lists.opensuse.org
/opensuse-security-announce/2009-07/msg00002.html
vendor-advisory, mailing-list
-
openwall.com
/lists/oss-security/2009/02/12/2
mailing-list
-
openwall.com
/lists/oss-security/2009/02/12/7
mailing-list
-
openwall.com
/lists/oss-security/2009/02/12/4
mailing-list
-
secunia.com
/advisories/35685
third-party-advisory, broken-link
-
secunia.com
/advisories/34499
third-party-advisory, broken-link
-
secunia.com
/advisories/35416
third-party-advisory, broken-link
-
net-snmp.svn.sourceforge.net
/viewvc/net-snmp?view=rev&revision=17367
product
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10289
vdb-entry, signature, broken-link
-
securitytracker.com
/id?1021921
vdb-entry, broken-link, third-party-advisory
-
net-snmp.svn.sourceforge.net
/viewvc/net-snmp/trunk/net-snmp/snmplib/snmpUDPDomain.c?r1=17325&r2=17367&pathrev=17367
product
Sources
- CVE List CVE-2008-6123
- NVD CVE-2008-6123
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.