PT-2015-7729 · Net Snmp+1 · Net-Snmp+1

Pierre Kim · Published 2015-11-10 · Updated 2016-12-07 · CVE-2015-8100

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenBSD versions prior to 5.9

Description The issue concerns the net-snmp package in OpenBSD, where the snmpd.conf file has 0644 permissions, allowing local users to read sensitive community information from this file.

Recommendations For OpenBSD versions prior to 5.9, change the permissions of the snmpd.conf file to prevent local users from reading it, such as setting the permissions to 0600 to restrict access to the owner only.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-8100

Affected Products

Openbsd

Net-Snmp

References · 7

• https://osv.dev/vulnerability/ALPINE-CVE-2015-8100 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-8100 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8100 · Security Note
• https://security.alpinelinux.org/vuln/CVE-2015-8100 · Note
• http://openwall.com/lists/oss-security/2015/11/09/6 · Note
• http://packetstormsecurity.com/files/134323/OpenBSD-net-snmp-Information-Disclosure.html · Note
• http://securitytracker.com/id/1034099 · Note