Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-0960

SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.

Published

2008-06-10T18:32:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco catos 7.1.1 No
Operating System cisco catos 7.3.1 No
Operating System cisco catos 7.4.1 No
Operating System cisco catos 8.3 No
Operating System cisco cisco_ios 12.0 No
Operating System cisco cisco_ios 12.0 No
Operating System cisco cisco_ios 12.1 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.2 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.3 No
Operating System cisco cisco_ios 12.4 No
Operating System cisco cisco_ios 12.4 No
Operating System cisco cisco_ios 12.4 No
Operating System cisco cisco_ios 12.4 No
Operating System cisco cisco_ios 12.4 No
Operating System cisco cisco_ios 12.4 No
Operating System cisco cisco_ios 12.4 No
Operating System cisco cisco_ios 12.4 No
Operating System cisco ios 10.0 No
Operating System cisco ios 11.0 No
Operating System cisco ios 11.1 No
Operating System cisco ios 11.3 No
Operating System cisco ios 12.2 No
Operating System cisco ios_xr 2.0 No
Operating System cisco ios_xr 3.0 No
Operating System cisco ios_xr 3.2 No
Operating System cisco ios_xr 3.3 No
Operating System cisco ios_xr 3.4 No
Operating System cisco ios_xr 3.5 No
Operating System cisco ios_xr 3.6 No
Operating System cisco ios_xr 3.7 No
Operating System cisco nx_os 4.0 No
Operating System cisco nx_os 4.0.1 No
Operating System cisco nx_os 4.0.2 No
Operating System ecos_sourceware ecos 1.1 No
Operating System ecos_sourceware ecos 1.2.1 No
Operating System ecos_sourceware ecos 1.3.1 No
Operating System ecos_sourceware ecos 2.0 No
Operating System ecos_sourceware ecos 2.0 No
Operating System net-snmp net_snmp 5.0 No
Operating System net-snmp net_snmp 5.0.1 No
Operating System net-snmp net_snmp 5.0.2 No
Operating System net-snmp net_snmp 5.0.3 No
Operating System net-snmp net_snmp 5.0.4 No
Operating System net-snmp net_snmp 5.0.5 No
Operating System net-snmp net_snmp 5.0.6 No
Operating System net-snmp net_snmp 5.0.7 No
Operating System net-snmp net_snmp 5.0.8 No
Operating System net-snmp net_snmp 5.0.9 No
Operating System net-snmp net_snmp 5.1 No
Operating System net-snmp net_snmp 5.1.1 No
Operating System net-snmp net_snmp 5.1.2 No
Operating System net-snmp net_snmp 5.2 No
Operating System net-snmp net_snmp 5.3 No
Operating System net-snmp net_snmp 5.3.0.1 No
Operating System net-snmp net_snmp 5.4 No
Operating System sun solaris 10.0 No
Operating System sun sunos 5.10 No
Hardware cisco ace_10_6504_bundle_with_4_gbps_throughput * No
Hardware cisco ace_10_6509_bundle_with_8_gbps_throughput * No
Hardware cisco ace_10_service_module * No
Hardware cisco ace_20_6504_bundle_with__4gbps_throughput * No
Hardware cisco ace_20_6509_bundle_with_8gbps_throughput * No
Hardware cisco ace_20_service_module * No
Hardware cisco ace_4710 * No
Hardware cisco ace_xml_gateway 5.2 No
Hardware cisco ace_xml_gateway 6.0 No
Hardware cisco mds_9120 * No
Hardware cisco mds_9124 * No
Hardware cisco mds_9134 * No
Hardware cisco mds_9140 * No
Hardware ingate ingate_firewall 2.2.0 No
Hardware ingate ingate_firewall 2.2.1 No
Hardware ingate ingate_firewall 2.2.2 No
Hardware ingate ingate_firewall 2.3.0 No
Hardware ingate ingate_firewall 2.4.0 No
Hardware ingate ingate_firewall 2.4.1 No
Hardware ingate ingate_firewall 2.5.0 No
Hardware ingate ingate_firewall 2.6.0 No
Hardware ingate ingate_firewall 2.6.1 No
Hardware ingate ingate_firewall 3.0.2 No
Hardware ingate ingate_firewall 3.1.0 No
Hardware ingate ingate_firewall 3.1.1 No
Hardware ingate ingate_firewall 3.1.3 No
Hardware ingate ingate_firewall 3.1.4 No
Hardware ingate ingate_firewall 3.2.0 No
Hardware ingate ingate_firewall 3.2.1 No
Hardware ingate ingate_firewall 3.2.2 No
Hardware ingate ingate_firewall 3.3.1 No
Hardware ingate ingate_firewall 4.1.0 No
Hardware ingate ingate_firewall 4.1.3 No
Hardware ingate ingate_firewall 4.2.1 No
Hardware ingate ingate_firewall 4.2.2 No
Hardware ingate ingate_firewall 4.2.3 No
Hardware ingate ingate_firewall 4.3.1 No
Hardware ingate ingate_firewall 4.4.1 No
Hardware ingate ingate_firewall 4.4.2 No
Hardware ingate ingate_firewall 4.5.1 No
Hardware ingate ingate_firewall 4.5.2 No
Hardware ingate ingate_firewall 4.6.0 No
Hardware ingate ingate_firewall 4.6.1 No
Hardware ingate ingate_firewall 4.6.2 No
Hardware ingate ingate_siparator 2.2.0 No
Hardware ingate ingate_siparator 2.2.1 No
Hardware ingate ingate_siparator 2.2.2 No
Hardware ingate ingate_siparator 2.3.0 No
Hardware ingate ingate_siparator 2.4.0 No
Hardware ingate ingate_siparator 2.4.1 No
Hardware ingate ingate_siparator 2.5.0 No
Hardware ingate ingate_siparator 2.6.0 No
Hardware ingate ingate_siparator 2.6.1 No
Hardware ingate ingate_siparator 3.0.2 No
Hardware ingate ingate_siparator 3.1.0 No
Hardware ingate ingate_siparator 3.1.1 No
Hardware ingate ingate_siparator 3.1.3 No
Hardware ingate ingate_siparator 3.1.4 No
Hardware ingate ingate_siparator 3.2.0 No
Hardware ingate ingate_siparator 3.2.1 No
Hardware ingate ingate_siparator 3.2.2 No
Hardware ingate ingate_siparator 3.3.1 No
Hardware ingate ingate_siparator 4.1.0 No
Hardware ingate ingate_siparator 4.1.3 No
Hardware ingate ingate_siparator 4.2.1 No
Hardware ingate ingate_siparator 4.2.2 No
Hardware ingate ingate_siparator 4.2.3 No
Hardware ingate ingate_siparator 4.3.1 No
Hardware ingate ingate_siparator 4.3.4 No
Hardware ingate ingate_siparator 4.4.1 No
Hardware ingate ingate_siparator 4.4.2 No
Hardware ingate ingate_siparator 4.5.1 No
Hardware ingate ingate_siparator 4.5.2 No
Hardware ingate ingate_siparator 4.6.0 No
Hardware ingate ingate_siparator 4.6.1 No
Hardware ingate ingate_siparator 4.6.2 No
Application juniper session_and_resource_control 1.0 Yes
Application juniper session_and_resource_control 2.0 Yes
Application juniper src_pe 1.0 Yes
Application juniper src_pe 2.0 Yes
References