CVE-2015-5677

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3, 10.1, and 10.2

Description The issue concerns the bsnmpd daemon in FreeBSD, which uses world-readable permissions on the snmpd.config file. This allows local users to read the file and obtain the secret key for USM authentication.

Recommendations For FreeBSD versions 9.3, 10.1, and 10.2, consider changing the permissions of the snmpd.config file to prevent world-readable access. For FreeBSD versions 9.3, 10.1, and 10.2, restrict local user access to the snmpd.config file until a proper fix is applied.