{"id":"CVE-2015-8100","aliases":["ALPINE-CVE-2015-8100","BELL-CVE-2015-8100","EUVD-2015-7993","GHSA-88wg-39x8-pwf8"],"status":"published","title":"The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows...","description":"The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00545,"percentile":0.45935,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2015-11-10T02:00:00Z","modified":"2026-09-09T06:17:47Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"net-snmp","fixed_in":["5.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"net-snmp","fixed_in":["5.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"net-snmp","fixed_in":["5.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-r2"}]}]}],"products":[{"vendor":"net-snmp","product":"net-snmp"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2015/11/09/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://packetstormsecurity.com/files/134323/OpenBSD-net-snmp-Information-Disclosure.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1034099","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8100"},{"url":"https://github.com/advisories/GHSA-88wg-39x8-pwf8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2015-8100","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2015-8100","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-8100","description":"The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.","status":"published","published":"2015-11-10T02:00:00Z","modified":"2024-08-06T08:13:31.081Z","updated_at":"2026-11-02T14:35:40.900357Z"}],"euvd":[{"id":"EUVD-2015-7993","description":"The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.","status":"published","published":"2015-11-10T02:00:00Z","modified":"2024-08-06T08:13:31Z","updated_at":"2026-11-03T01:57:28.296316Z"}],"ghsa":[{"id":"GHSA-88wg-39x8-pwf8","title":"The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows...","description":"The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.","status":"published","published":"2022-05-17T03:25:24Z","modified":"2023-01-27T05:07:46Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:43:11.35995Z"}],"nvd":[{"id":"CVE-2015-8100","description":"The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.","status":"published","published":"2015-11-10T03:59:02.91Z","modified":"2026-06-17T00:34:02.66Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:12.30866Z"}],"osv":[{"id":"BELL-CVE-2015-8100","title":"CVE-2015-8100 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:06.175208Z","modified":"2026-01-28T07:20:50.253717Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"ALPINE-CVE-2015-8100","description":"The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.","status":"published","published":"2015-11-10T03:59:02.91Z","modified":"2026-09-09T06:17:47.497978305Z","updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"CVE-2015-8100","description":"The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.","status":"published","published":"2015-11-10T03:59:02Z","modified":"2026-04-10T03:45:29.240289Z","updated_at":"2026-11-02T15:44:01.068991Z"}]}}