CVE-2008-0960
NoneCVSS
—
EPSS
68.8%
Published
Jun 10, 2008
CISA due date
—
The record
SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | net-snmp | 0 | 5.4.1~dfsg-8.1 |
| Debian:11 | net-snmp | 0 | 5.4.1~dfsg-8.1 |
| Debian:12 | net-snmp | 0 | 5.4.1~dfsg-8.1 |
| Debian:13 | net-snmp | 0 | 5.4.1~dfsg-8.1 |
| Debian:4.0 | net-snmp | 0 | 5.2.3-7etch4 |
| Debian:5.0 | net-snmp | 0 | 5.4.1~dfsg-7.1+lenny1 |
| Red Hat:enterprise_linux:2.1::as | ucd-snmp | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:2.1::as | ucd-snmp-devel | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:2.1::as | ucd-snmp-utils | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:2.1::aw | ucd-snmp | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:2.1::aw | ucd-snmp-devel | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:2.1::aw | ucd-snmp-utils | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:2.1::es | ucd-snmp | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:2.1::es | ucd-snmp-devel | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:2.1::es | ucd-snmp-utils | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:2.1::ws | ucd-snmp | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:2.1::ws | ucd-snmp-devel | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:2.1::ws | ucd-snmp-utils | 0 | 0:4.2.5-8.AS21.7 |
| Red Hat:enterprise_linux:3::as | net-snmp | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::as | net-snmp-debuginfo | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::as | net-snmp-devel | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::as | net-snmp-libs | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::as | net-snmp-perl | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::as | net-snmp-utils | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::desktop | net-snmp | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::desktop | net-snmp-debuginfo | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::desktop | net-snmp-devel | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::desktop | net-snmp-libs | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::desktop | net-snmp-perl | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::desktop | net-snmp-utils | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::es | net-snmp | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::es | net-snmp-debuginfo | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::es | net-snmp-devel | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::es | net-snmp-libs | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::es | net-snmp-perl | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::es | net-snmp-utils | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::ws | net-snmp | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::ws | net-snmp-debuginfo | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::ws | net-snmp-devel | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::ws | net-snmp-libs | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::ws | net-snmp-perl | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:3::ws | net-snmp-utils | 0 | 0:5.0.9-2.30E.24 |
| Red Hat:enterprise_linux:4::as | net-snmp | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::as | net-snmp-debuginfo | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::as | net-snmp-devel | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::as | net-snmp-libs | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::as | net-snmp-perl | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::as | net-snmp-utils | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::desktop | net-snmp | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::desktop | net-snmp-debuginfo | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::desktop | net-snmp-devel | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::desktop | net-snmp-libs | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::desktop | net-snmp-perl | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::desktop | net-snmp-utils | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::es | net-snmp | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::es | net-snmp-debuginfo | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::es | net-snmp-devel | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::es | net-snmp-libs | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::es | net-snmp-perl | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::es | net-snmp-utils | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::ws | net-snmp | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::ws | net-snmp-debuginfo | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::ws | net-snmp-devel | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::ws | net-snmp-libs | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::ws | net-snmp-perl | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:4::ws | net-snmp-utils | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:enterprise_linux:5::client | net-snmp | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::client | net-snmp-debuginfo | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::client | net-snmp-devel | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::client | net-snmp-libs | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::client | net-snmp-perl | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::client | net-snmp-utils | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp-debuginfo | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp-devel | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp-libs | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp-perl | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp-utils | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::server | net-snmp | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::server | net-snmp-debuginfo | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::server | net-snmp-devel | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::server | net-snmp-libs | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::server | net-snmp-perl | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:enterprise_linux:5::server | net-snmp-utils | 0 | 1:5.3.1-24.el5_2.1 |
| Red Hat:rhel_eus:4.5::as | net-snmp | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:rhel_eus:4.5::as | net-snmp-debuginfo | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:rhel_eus:4.5::as | net-snmp-devel | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:rhel_eus:4.5::as | net-snmp-libs | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:rhel_eus:4.5::as | net-snmp-perl | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:rhel_eus:4.5::as | net-snmp-utils | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:rhel_eus:4.5::es | net-snmp | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:rhel_eus:4.5::es | net-snmp-debuginfo | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:rhel_eus:4.5::es | net-snmp-devel | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:rhel_eus:4.5::es | net-snmp-libs | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:rhel_eus:4.5::es | net-snmp-perl | 0 | 0:5.1.2-11.el4_6.11.3 |
| Red Hat:rhel_eus:4.5::es | net-snmp-utils | 0 | 0:5.1.2-11.el4_6.11.3 |
Related vulnerabilities
- CVE-2015-5621 The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove… Also affects net-snmp
- CVE-2014-3565 snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote… Also affects net-snmp
- CVE-2007-5846 The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a… Also affects net-snmp
- CVE-2026-114638 Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the… CWE-287
- CVE-2026-114639 Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass… CWE-287
- CVE-2026-112104 A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. CWE-287
- CVE-2026-107228 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP… CWE-287
- CVE-2026-86781 The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40… CWE-287