CVE-2015-8100
net-snmp < 5.8 - Exposure of Sensitive Information via Weak snmpd.conf Permissions
Title source: llmDescription
The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.
References (3)
Core 3
Core References
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/11/09/6
Exploit, Third Party Advisory x_refsource_misc
http://packetstormsecurity.com/files/134323/OpenBSD-net-snmp-Information-Disclosure.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034099
Scores
EPSS
0.0054
EPSS Percentile
41.5%
Details
CWE
CWE-200
Status
published
Products (1)
net-snmp/net-snmp
< 5.8
Published
Nov 10, 2015
Tracked Since
Feb 18, 2026