{"id":"CVE-2008-6123","aliases":["DEBIAN-CVE-2008-6123","EUVD-2008-6093","GHSA-85rg-g6cg-264m","RHSA-2009:0295"],"status":"published","title":"The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1,...","description":"The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to \"source/destination IP address confusion.\"","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02896,"percentile":0.87022,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-863"],"published":"2009-02-12T16:00:00Z","modified":"2026-10-23T17:47:33Z","fixes":[{"ecosystem":"Debian:12","package":"net-snmp","fixed_in":["5.4.3~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"net-snmp","fixed_in":["5.4.3~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"net-snmp","fixed_in":["5.4.3~dfsg-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp-debuginfo","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp-devel","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp-libs","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp-perl","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp-utils","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp-debuginfo","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp-devel","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp-libs","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp-perl","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp-utils","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp-debuginfo","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp-devel","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp-libs","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp-perl","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp-utils","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp-debuginfo","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp-devel","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp-libs","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp-perl","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp-utils","fixed_in":["0:5.0.9-2.30E.27"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3~dfsg-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"net-snmp-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"net-snmp-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"net-snmp-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"net-snmp-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-2.30E.27"}]}]}],"products":[{"vendor":"net-snmp","product":"net-snmp"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"suse","product":"linux_enterprise"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=250429","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","evidence","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=485211","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","article"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0295.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Not Applicable","web"]},{"url":"http://secunia.com/advisories/35685","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://secunia.com/advisories/34499","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","article"]},{"url":"http://secunia.com/advisories/35416","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://net-snmp.svn.sourceforge.net/viewvc/net-snmp?view=rev\u0026revision=17367","tags":["x_refsource_CONFIRM","x_transferred","Product","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10289","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link","web"]},{"url":"http://www.securitytracker.com/id?1021921","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/trunk/net-snmp/snmplib/snmpUDPDomain.c?r1=17325\u0026r2=17367\u0026pathrev=17367","tags":["x_refsource_MISC","x_transferred","Product","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-6123","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-85rg-g6cg-264m"},{"url":"https://security-tracker.debian.org/tracker/CVE-2008-6123","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:0295","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0295.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-6123","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-6123","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-6123","description":"The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to \"source/destination IP address confusion.\"","status":"published","published":"2009-02-12T16:00:00Z","modified":"2024-08-07T11:20:25.209Z","updated_at":"2026-11-02T14:34:46.265542Z"}],"euvd":[{"id":"EUVD-2008-6093","description":"The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to \"source/destination IP address confusion.\"","status":"published","published":"2009-02-12T16:00:00Z","modified":"2024-08-07T11:20:25Z","updated_at":"2026-11-03T01:38:37.840134Z"}],"ghsa":[{"id":"GHSA-85rg-g6cg-264m","title":"The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1,...","description":"The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to \"source/destination IP address confusion.\"","status":"published","published":"2022-05-17T00:41:19Z","modified":"2024-01-12T21:30:18Z","cwes":["CWE-20","CWE-863"],"updated_at":"2026-11-02T14:55:24.514817Z"}],"nvd":[{"id":"CVE-2008-6123","description":"The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to \"source/destination IP address confusion.\"","status":"published","published":"2009-02-12T16:30:00.187Z","modified":"2026-06-16T23:01:39.597Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:01:31.111729Z"}],"osv":[{"id":"CVE-2008-6123","description":"The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to \"source/destination IP address confusion.\"","status":"published","published":"2009-02-12T16:30:00Z","modified":"2026-04-10T03:40:29.395327Z","updated_at":"2026-11-02T15:43:57.452479Z"},{"id":"DEBIAN-CVE-2008-6123","description":"The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to \"source/destination IP address confusion.\"","status":"published","published":"2009-02-12T16:30:00.187Z","modified":"2026-10-23T17:47:33.560614433Z","updated_at":"2026-11-02T15:45:23.742363Z"},{"id":"RHSA-2009:0295","title":"Red Hat Security Advisory: net-snmp security update","status":"published","published":"2024-09-15T17:43:58Z","modified":"2026-06-26T10:10:34Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}