Every CVE Search/ Get API key

CVE-2008-6123

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1,...

5.0 MediumFix available

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."

Exploit likelihood

2.90%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."

Record
CVE-2008-6123
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-863
Updated
2026-11-02
CVE List No score

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."

Record
CVE-2008-6123
Updated
2026-11-02
EUVDEUVD-2008-6093 No score

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."

Record
EUVD-2008-6093
Updated
2026-11-03
GitHub AdvisoriesGHSA-85rg-g6cg-264m No score

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1,...

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."

Record
GHSA-85rg-g6cg-264m
Weakness
CWE-20, CWE-863
Updated
2026-11-02
OSV No score

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."

Record
CVE-2008-6123
Updated
2026-11-02
OSVDEBIAN-CVE-2008-6123 No score

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."

Record
DEBIAN-CVE-2008-6123
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
net-snmp
Debian:12
 before 5.4.3~dfsg-1
5.4.3~dfsg-1
net-snmp
Debian:13
 before 5.4.3~dfsg-1
5.4.3~dfsg-1
net-snmp
Debian:14
 before 5.4.3~dfsg-1
5.4.3~dfsg-1
net-snmp
Red Hat:enterprise_linux:3::as
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-devel
Red Hat:enterprise_linux:3::as
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-libs
Red Hat:enterprise_linux:3::as
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-perl
Red Hat:enterprise_linux:3::as
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-utils
Red Hat:enterprise_linux:3::as
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp
Red Hat:enterprise_linux:3::desktop
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
Show 17 moreShow less
Affected packages
PackageAffectedFixed
net-snmp-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-devel
Red Hat:enterprise_linux:3::desktop
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-libs
Red Hat:enterprise_linux:3::desktop
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-perl
Red Hat:enterprise_linux:3::desktop
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-utils
Red Hat:enterprise_linux:3::desktop
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp
Red Hat:enterprise_linux:3::es
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-devel
Red Hat:enterprise_linux:3::es
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-libs
Red Hat:enterprise_linux:3::es
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-perl
Red Hat:enterprise_linux:3::es
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-utils
Red Hat:enterprise_linux:3::es
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp
Red Hat:enterprise_linux:3::ws
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-devel
Red Hat:enterprise_linux:3::ws
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-libs
Red Hat:enterprise_linux:3::ws
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-perl
Red Hat:enterprise_linux:3::ws
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27
net-snmp-utils
Red Hat:enterprise_linux:3::ws
 before 0:5.0.9-2.30E.27
0:5.0.9-2.30E.27

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-6123 is a medium vulnerability (CVSS 5.0) in Net-snmp, published February 12, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.90%, the 86th percentile. Fixed in net-snmp 5.4.3~dfsg-1.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open