PT-2015-7729 · Net Snmp+1 · Net-Snmp+1

Pierre Kim · Publicado 2015-11-10 · Atualizado 2016-12-07 · CVE-2015-8100

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenBSD versions prior to 5.9

Description The issue concerns the net-snmp package in OpenBSD, where the snmpd.conf file has 0644 permissions, allowing local users to read sensitive community information from this file.

Recommendations For OpenBSD versions prior to 5.9, change the permissions of the snmpd.conf file to prevent local users from reading it, such as setting the permissions to 0600 to restrict access to the owner only.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-8100

Produtos afetados

Openbsd

Net-Snmp

Referências · 7

• https://security.alpinelinux.org/vuln/CVE-2015-8100 · Nota
• https://osv.dev/vulnerability/ALPINE-CVE-2015-8100 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2015-8100 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-8100 · Nota de Segurança
• http://openwall.com/lists/oss-security/2015/11/09/6 · Nota
• http://packetstormsecurity.com/files/134323/OpenBSD-net-snmp-Information-Disclosure.html · Nota
• http://securitytracker.com/id/1034099 · Nota