CVE-2015-8100

The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2015-11-10

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Net-snmp (Net-snmp)

References

• http://packetstormsecurity.com/files/134323/OpenBSD-net-snmp-Information-Disclosure.html
• http://www.openwall.com/lists/oss-security/2015/11/09/6
• http://www.securitytracker.com/id/1034099