CVE-2008-6123

Name of the Vulnerable Software and Affected Versions net-snmp versions 5.0.9 through 5.4.2.1

Description The issue is related to the netsnmp udp fmtaddr function in snmplib/snmpUDPDomain.c, which does not properly parse hosts.allow rules when using TCP wrappers for client authorization. This allows remote attackers to bypass intended access restrictions and execute SNMP queries, due to "source/destination IP address confusion."

Recommendations For net-snmp versions 5.0.9 through 5.4.2.1, consider disabling the use of TCP wrappers for client authorization until a patch is available, or apply configuration changes to hosts.allow rules to minimize the risk of exploitation.