CVE-2015-8100

EUVD-2015-7993
The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
Affected Products (NVD)
VendorProductVersion
net-snmpnet-snmp
𝑥
≤ 5.8
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
net-snmp
bookworm
5.9.3+dfsg-2
fixed
bullseye
5.9+dfsg-4+deb11u1
fixed
bullseye (security)
5.9+dfsg-4+deb11u1
fixed
sid
5.9.4+dfsg-1.1
fixed
trixie
5.9.4+dfsg-1.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
net-snmp
precise
not-affected
trusty
not-affected
vivid
not-affected
wily
not-affected
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/134323/OpenBSD-net-snmp-Information-Disclosure.html
http://www.openwall.com/lists/oss-security/2015/11/09/6
http://www.securitytracker.com/id/1034099
http://packetstormsecurity.com/files/134323/OpenBSD-net-snmp-Information-Disclosure.html
http://www.openwall.com/lists/oss-security/2015/11/09/6
http://www.securitytracker.com/id/1034099