CVE-2008-6123

Common Vulnerabilities and Exposures

CVE-2008-6123 at MITRE

Details

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."

Novell Bugzilla entry: 475532

SUSE Security Advisories:

SUSE-SR:2009:011 , published Tue, 09 Jun 2009 12:00:00 +0000
SUSE-SR:2009:012 , published Fri, 03 Jul 2009 16:00:00 +0000

Product(s)	Fixed package version(s)	References
openSUSE 10.3	`libsnmp15 >= 5.4.1-19.6` `net-snmp >= 5.4.1-19.6` `net-snmp-32bit >= 5.4.1-19.6` `net-snmp-64bit >= 5.4.1-19.6` `net-snmp-devel >= 5.4.1-19.6` `net-snmp-devel-64bit >= 5.4.1-19.6` `perl-SNMP >= 5.4.1-19.6` `snmp-mibs >= 5.4.1-19.6`	ZYPP Patch Nr: 6247 SAT Patch Nr: 879
openSUSE 11.0	`net-snmp-debuginfo >= 5.4.1-77.6` `net-snmp-debugsource >= 5.4.1-77.6`	ZYPP Patch Nr: 6247 SAT Patch Nr: 879
openSUSE 11.0	`libsnmp15 >= 5.4.1-77.6` `net-snmp >= 5.4.1-77.6` `net-snmp-32bit >= 5.4.1-77.6` `net-snmp-64bit >= 5.4.1-77.6` `net-snmp-devel >= 5.4.1-77.6` `net-snmp-devel-64bit >= 5.4.1-77.6` `perl-SNMP >= 5.4.1-77.6` `snmp-mibs >= 5.4.1-77.6`	ZYPP Patch Nr: 6247 SAT Patch Nr: 879
openSUSE 11.1	`net-snmp-debuginfo >= 5.4.2.1-5.2.1` `net-snmp-debugsource >= 5.4.2.1-5.2.1`	ZYPP Patch Nr: 6247 SAT Patch Nr: 879
openSUSE 11.1	`libsnmp15 >= 5.4.2.1-5.2.1` `libsnmp15-32bit >= 5.4.2.1-5.2.1` `libsnmp15-64bit >= 5.4.2.1-5.2.1` `net-snmp >= 5.4.2.1-5.2.1` `net-snmp-devel >= 5.4.2.1-5.2.1` `perl-SNMP >= 5.4.2.1-5.2.1` `snmp-mibs >= 5.4.2.1-5.2.1`	ZYPP Patch Nr: 6247 SAT Patch Nr: 879
SUSE Linux Enterprise Desktop 10 SP2 for x86 SUSE Linux Enterprise Server 10 SP2 for x86	`net-snmp >= 5.3.0.1-25.31` `net-snmp-devel >= 5.3.0.1-25.31` `perl-SNMP >= 5.3.0.1-25.31`	sled10-sp2. x86 sled10-sp2. x86-64 sles10-sp2-sdk. x86-64 sles10-sp2. ia64 sles10-sp2-sdk. x86 sles10-sp2. s390x sles10-sp2-sdk. s390x sles10-sp2. ppc sles10-sp2. x86 sles10-sp2. x86-64 sles10-sp2-sdk. ia64 sles10-sp2-sdk. ppc ZYPP Patch Nr: 6248
SLE SDK 10 SP2 for IBM zSeries SLE SDK 10 SP2 for IPF SLE SDK 10 SP2 for X86-64 SLE SDK 10 SP2 for x86	`net-snmp-devel >= 5.3.0.1-25.31`	sled10-sp2. x86 sled10-sp2. x86-64 sles10-sp2-sdk. x86-64 sles10-sp2. ia64 sles10-sp2-sdk. x86 sles10-sp2. s390x sles10-sp2-sdk. s390x sles10-sp2. ppc sles10-sp2. x86 sles10-sp2. x86-64 sles10-sp2-sdk. ia64 sles10-sp2-sdk. ppc ZYPP Patch Nr: 6248
SLE SDK 10 SP2 for IBM iSeries and IBM pSeries	`net-snmp-devel >= 5.3.0.1-25.31` `net-snmp-devel-64bit >= 5.3.0.1-25.31`	sled10-sp2. x86 sled10-sp2. x86-64 sles10-sp2-sdk. x86-64 sles10-sp2. ia64 sles10-sp2-sdk. x86 sles10-sp2. s390x sles10-sp2-sdk. s390x sles10-sp2. ppc sles10-sp2. x86 sles10-sp2. x86-64 sles10-sp2-sdk. ia64 sles10-sp2-sdk. ppc ZYPP Patch Nr: 6248
SUSE Linux Enterprise Server 10 SP2 for IPF	`net-snmp >= 5.3.0.1-25.31` `net-snmp-devel >= 5.3.0.1-25.31` `net-snmp-x86 >= 5.3.0.1-25.31` `perl-SNMP >= 5.3.0.1-25.31`	sled10-sp2. x86 sled10-sp2. x86-64 sles10-sp2-sdk. x86-64 sles10-sp2. ia64 sles10-sp2-sdk. x86 sles10-sp2. s390x sles10-sp2-sdk. s390x sles10-sp2. ppc sles10-sp2. x86 sles10-sp2. x86-64 sles10-sp2-sdk. ia64 sles10-sp2-sdk. ppc ZYPP Patch Nr: 6248
SUSE Linux Enterprise Server 10 SP2 for IBM POWER	`net-snmp >= 5.3.0.1-25.31` `net-snmp-64bit >= 5.3.0.1-25.31` `net-snmp-devel >= 5.3.0.1-25.31` `net-snmp-devel-64bit >= 5.3.0.1-25.31` `perl-SNMP >= 5.3.0.1-25.31`	sled10-sp2. x86 sled10-sp2. x86-64 sles10-sp2-sdk. x86-64 sles10-sp2. ia64 sles10-sp2-sdk. x86 sles10-sp2. s390x sles10-sp2-sdk. s390x sles10-sp2. ppc sles10-sp2. x86 sles10-sp2. x86-64 sles10-sp2-sdk. ia64 sles10-sp2-sdk. ppc ZYPP Patch Nr: 6248
SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit	`net-snmp >= 5.3.0.1-25.31` `net-snmp-32bit >= 5.3.0.1-25.31` `net-snmp-devel >= 5.3.0.1-25.31` `perl-SNMP >= 5.3.0.1-25.31`	sled10-sp2. x86 sled10-sp2. x86-64 sles10-sp2-sdk. x86-64 sles10-sp2. ia64 sles10-sp2-sdk. x86 sles10-sp2. s390x sles10-sp2-sdk. s390x sles10-sp2. ppc sles10-sp2. x86 sles10-sp2. x86-64 sles10-sp2-sdk. ia64 sles10-sp2-sdk. ppc ZYPP Patch Nr: 6248
Novell Linux Desktop 9 for x86 Novell Linux Desktop 9 for x86_64 Novell Linux POS 9 Open Enterprise Server SUSE CORE 9 for IBM POWER SUSE CORE 9 for IBM S/390 31bit SUSE CORE 9 for IBM zSeries 64bit SUSE CORE 9 for Itanium Processor Family SUSE CORE 9 for x86	`net-snmp >= 5.1.3.1-0.28` `net-snmp-devel >= 5.1.3.1-0.28` `perl-SNMP >= 5.1.3.1-0.28`	core9. ppc core9. x86 sles9-nld. x86-64 core9. s390x core9. s390 sles9-oes. x86 core9. ia64 sles9-nlpos. x86 core9. x86-64 sles9-nld. x86 YOU Patch Nr: 12441
SUSE CORE 9 for AMD64 and Intel EM64T	`net-snmp >= 5.1.3.1-0.28` `net-snmp-32bit >= 9-200906161409` `net-snmp-devel >= 5.1.3.1-0.28` `perl-SNMP >= 5.1.3.1-0.28`	core9. ppc core9. x86 sles9-nld. x86-64 core9. s390x core9. s390 sles9-oes. x86 core9. ia64 sles9-nlpos. x86 core9. x86-64 sles9-nld. x86 YOU Patch Nr: 12441