CVE-2008-6123 Auth bypass in n/a

Medium 5.0 Published 12 Feb 2009 Updated 7 Aug 2024

Remote attackers can bypass TCP wrapper access restrictions to execute SNMP queries due to improper parsing of hosts.allow rules in net-snmp.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2008-6123?

CVE-2008-6123 is a medium-severity authentication bypass vulnerability in Opensuse Opensuse, published on 12 Feb 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."

Weakness: CWE-863

Which versions are affected by CVE-2008-6123?

It affects 4 products.

Linux distribution packages (24)

`net-snmp` Red Hat:enterprise_linux:3::as	All versions	`0:5.0.9-2.30E.27`
`net-snmp-debuginfo` Red Hat:enterprise_linux:3::as	All versions	`0:5.0.9-2.30E.27`
`net-snmp-devel` Red Hat:enterprise_linux:3::as	All versions	`0:5.0.9-2.30E.27`
`net-snmp-libs` Red Hat:enterprise_linux:3::as	All versions	`0:5.0.9-2.30E.27`
`net-snmp-perl` Red Hat:enterprise_linux:3::as	All versions	`0:5.0.9-2.30E.27`
`net-snmp-utils` Red Hat:enterprise_linux:3::as	All versions	`0:5.0.9-2.30E.27`
`net-snmp` Red Hat:enterprise_linux:3::desktop	All versions	`0:5.0.9-2.30E.27`
`net-snmp-debuginfo` Red Hat:enterprise_linux:3::desktop	All versions	`0:5.0.9-2.30E.27`
`net-snmp-devel` Red Hat:enterprise_linux:3::desktop	All versions	`0:5.0.9-2.30E.27`
`net-snmp-libs` Red Hat:enterprise_linux:3::desktop	All versions	`0:5.0.9-2.30E.27`
`net-snmp-perl` Red Hat:enterprise_linux:3::desktop	All versions	`0:5.0.9-2.30E.27`
`net-snmp-utils` Red Hat:enterprise_linux:3::desktop	All versions	`0:5.0.9-2.30E.27`
`net-snmp` Red Hat:enterprise_linux:3::es	All versions	`0:5.0.9-2.30E.27`
`net-snmp-debuginfo` Red Hat:enterprise_linux:3::es	All versions	`0:5.0.9-2.30E.27`
`net-snmp-devel` Red Hat:enterprise_linux:3::es	All versions	`0:5.0.9-2.30E.27`
`net-snmp-libs` Red Hat:enterprise_linux:3::es	All versions	`0:5.0.9-2.30E.27`
`net-snmp-perl` Red Hat:enterprise_linux:3::es	All versions	`0:5.0.9-2.30E.27`
`net-snmp-utils` Red Hat:enterprise_linux:3::es	All versions	`0:5.0.9-2.30E.27`
`net-snmp` Red Hat:enterprise_linux:3::ws	All versions	`0:5.0.9-2.30E.27`
`net-snmp-debuginfo` Red Hat:enterprise_linux:3::ws	All versions	`0:5.0.9-2.30E.27`
`net-snmp-devel` Red Hat:enterprise_linux:3::ws	All versions	`0:5.0.9-2.30E.27`
`net-snmp-libs` Red Hat:enterprise_linux:3::ws	All versions	`0:5.0.9-2.30E.27`
`net-snmp-perl` Red Hat:enterprise_linux:3::ws	All versions	`0:5.0.9-2.30E.27`
`net-snmp-utils` Red Hat:enterprise_linux:3::ws	All versions	`0:5.0.9-2.30E.27`

Products include Net-Snmp Net-Snmp, Opensuse Opensuse, Redhat Enterprise Linux, Suse Linux Enterprise.

How do I fix CVE-2008-6123?

Apply the vendor's patch.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2008-6123 being exploited?

There is no known exploitation of CVE-2008-6123 in the wild and no public exploit code.

All Opensuse Opensuse vulnerabilities

Sources

Also known as DEBIAN-CVE-2008-6123, GHSA-85rg-g6cg-264m, RHSA-2009:0295.