CVEDB API

Vulnerability Details CVE-2008-0960

SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.366

EPSS Ranking 96.9%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2008-0960

Juniper » Session And Resource Control » Version: 1.0

cpe:2.3:a:juniper:session_and_resource_control:1.0
Juniper » Session And Resource Control » Version: 2.0

cpe:2.3:a:juniper:session_and_resource_control:2.0
Juniper » Src Pe » Version: 1.0

cpe:2.3:a:juniper:src_pe:1.0
Juniper » Src Pe » Version: 2.0

cpe:2.3:a:juniper:src_pe:2.0
Cisco » Ace 10 6504 Bundle With 4 Gbps Throughput » Version: Any

cpe:2.3:h:cisco:ace_10_6504_bundle_with_4_gbps_throughput:*
Cisco » Ace 10 6509 Bundle With 8 Gbps Throughput » Version: Any

cpe:2.3:h:cisco:ace_10_6509_bundle_with_8_gbps_throughput:*
Cisco » Ace 10 Service Module » Version: Any

cpe:2.3:h:cisco:ace_10_service_module:*
Cisco » Ace 20 6504 Bundle With 4gbps Throughput » Version: Any

cpe:2.3:h:cisco:ace_20_6504_bundle_with__4gbps_throughput:*
Cisco » Ace 20 6509 Bundle With 8gbps Throughput » Version: Any

cpe:2.3:h:cisco:ace_20_6509_bundle_with_8gbps_throughput:*
Cisco » Ace 20 Service Module » Version: Any

cpe:2.3:h:cisco:ace_20_service_module:*
Cisco » Ace 4710 » Version: Any

cpe:2.3:h:cisco:ace_4710:*
Cisco » Ace Xml Gateway » Version: 5.2

cpe:2.3:h:cisco:ace_xml_gateway:5.2
Cisco » Ace Xml Gateway » Version: 6.0

cpe:2.3:h:cisco:ace_xml_gateway:6.0
Cisco » Mds 9120 » Version: Any

cpe:2.3:h:cisco:mds_9120:*
Cisco » Mds 9124 » Version: Any

cpe:2.3:h:cisco:mds_9124:*
Cisco » Mds 9134 » Version: N/A

cpe:2.3:h:cisco:mds_9134:-
Cisco » Mds 9140 » Version: N/A

cpe:2.3:h:cisco:mds_9140:-
Ingate » Ingate Firewall » Version: 2.2.0

cpe:2.3:h:ingate:ingate_firewall:2.2.0
Ingate » Ingate Firewall » Version: 2.2.1

cpe:2.3:h:ingate:ingate_firewall:2.2.1
Ingate » Ingate Firewall » Version: 2.2.2

cpe:2.3:h:ingate:ingate_firewall:2.2.2
Ingate » Ingate Firewall » Version: 2.3.0

cpe:2.3:h:ingate:ingate_firewall:2.3.0
Ingate » Ingate Firewall » Version: 2.4.0

cpe:2.3:h:ingate:ingate_firewall:2.4.0
Ingate » Ingate Firewall » Version: 2.4.1

cpe:2.3:h:ingate:ingate_firewall:2.4.1
Ingate » Ingate Firewall » Version: 2.5.0

cpe:2.3:h:ingate:ingate_firewall:2.5.0
Ingate » Ingate Firewall » Version: 2.6.0

cpe:2.3:h:ingate:ingate_firewall:2.6.0
Ingate » Ingate Firewall » Version: 2.6.1

cpe:2.3:h:ingate:ingate_firewall:2.6.1
Ingate » Ingate Firewall » Version: 3.0.2

cpe:2.3:h:ingate:ingate_firewall:3.0.2
Ingate » Ingate Firewall » Version: 3.1.0

cpe:2.3:h:ingate:ingate_firewall:3.1.0
Ingate » Ingate Firewall » Version: 3.1.1

cpe:2.3:h:ingate:ingate_firewall:3.1.1
Ingate » Ingate Firewall » Version: 3.1.3

cpe:2.3:h:ingate:ingate_firewall:3.1.3
Ingate » Ingate Firewall » Version: 3.1.4

cpe:2.3:h:ingate:ingate_firewall:3.1.4
Ingate » Ingate Firewall » Version: 3.2.0

cpe:2.3:h:ingate:ingate_firewall:3.2.0
Ingate » Ingate Firewall » Version: 3.2.1

cpe:2.3:h:ingate:ingate_firewall:3.2.1
Ingate » Ingate Firewall » Version: 3.2.2

cpe:2.3:h:ingate:ingate_firewall:3.2.2
Ingate » Ingate Firewall » Version: 3.3.1

cpe:2.3:h:ingate:ingate_firewall:3.3.1
Ingate » Ingate Firewall » Version: 4.1.0

cpe:2.3:h:ingate:ingate_firewall:4.1.0
Ingate » Ingate Firewall » Version: 4.1.3

cpe:2.3:h:ingate:ingate_firewall:4.1.3
Ingate » Ingate Firewall » Version: 4.2.1

cpe:2.3:h:ingate:ingate_firewall:4.2.1
Ingate » Ingate Firewall » Version: 4.2.2

cpe:2.3:h:ingate:ingate_firewall:4.2.2
Ingate » Ingate Firewall » Version: 4.2.3

cpe:2.3:h:ingate:ingate_firewall:4.2.3
Ingate » Ingate Firewall » Version: 4.3.1

cpe:2.3:h:ingate:ingate_firewall:4.3.1
Ingate » Ingate Firewall » Version: 4.4.1

cpe:2.3:h:ingate:ingate_firewall:4.4.1
Ingate » Ingate Firewall » Version: 4.4.2

cpe:2.3:h:ingate:ingate_firewall:4.4.2
Ingate » Ingate Firewall » Version: 4.5.1

cpe:2.3:h:ingate:ingate_firewall:4.5.1
Ingate » Ingate Firewall » Version: 4.5.2

cpe:2.3:h:ingate:ingate_firewall:4.5.2
Ingate » Ingate Firewall » Version: 4.6.0

cpe:2.3:h:ingate:ingate_firewall:4.6.0
Ingate » Ingate Firewall » Version: 4.6.1

cpe:2.3:h:ingate:ingate_firewall:4.6.1
Ingate » Ingate Firewall » Version: 4.6.2

cpe:2.3:h:ingate:ingate_firewall:4.6.2
Ingate » Ingate Siparator » Version: 2.2.0

cpe:2.3:h:ingate:ingate_siparator:2.2.0
Ingate » Ingate Siparator » Version: 2.2.1

cpe:2.3:h:ingate:ingate_siparator:2.2.1
Ingate » Ingate Siparator » Version: 2.2.2

cpe:2.3:h:ingate:ingate_siparator:2.2.2
Ingate » Ingate Siparator » Version: 2.3.0

cpe:2.3:h:ingate:ingate_siparator:2.3.0
Ingate » Ingate Siparator » Version: 2.4.0

cpe:2.3:h:ingate:ingate_siparator:2.4.0
Ingate » Ingate Siparator » Version: 2.4.1

cpe:2.3:h:ingate:ingate_siparator:2.4.1
Ingate » Ingate Siparator » Version: 2.5.0

cpe:2.3:h:ingate:ingate_siparator:2.5.0
Ingate » Ingate Siparator » Version: 2.6.0

cpe:2.3:h:ingate:ingate_siparator:2.6.0
Ingate » Ingate Siparator » Version: 2.6.1

cpe:2.3:h:ingate:ingate_siparator:2.6.1
Ingate » Ingate Siparator » Version: 3.0.2

cpe:2.3:h:ingate:ingate_siparator:3.0.2
Ingate » Ingate Siparator » Version: 3.1.0

cpe:2.3:h:ingate:ingate_siparator:3.1.0
Ingate » Ingate Siparator » Version: 3.1.1

cpe:2.3:h:ingate:ingate_siparator:3.1.1
Ingate » Ingate Siparator » Version: 3.1.3

cpe:2.3:h:ingate:ingate_siparator:3.1.3
Ingate » Ingate Siparator » Version: 3.1.4

cpe:2.3:h:ingate:ingate_siparator:3.1.4
Ingate » Ingate Siparator » Version: 3.2.0

cpe:2.3:h:ingate:ingate_siparator:3.2.0
Ingate » Ingate Siparator » Version: 3.2.1

cpe:2.3:h:ingate:ingate_siparator:3.2.1
Ingate » Ingate Siparator » Version: 3.2.2

cpe:2.3:h:ingate:ingate_siparator:3.2.2
Ingate » Ingate Siparator » Version: 3.3.1

cpe:2.3:h:ingate:ingate_siparator:3.3.1
Ingate » Ingate Siparator » Version: 4.1.0

cpe:2.3:h:ingate:ingate_siparator:4.1.0
Ingate » Ingate Siparator » Version: 4.1.3

cpe:2.3:h:ingate:ingate_siparator:4.1.3
Ingate » Ingate Siparator » Version: 4.2.1

cpe:2.3:h:ingate:ingate_siparator:4.2.1
Ingate » Ingate Siparator » Version: 4.2.2

cpe:2.3:h:ingate:ingate_siparator:4.2.2
Ingate » Ingate Siparator » Version: 4.2.3

cpe:2.3:h:ingate:ingate_siparator:4.2.3
Ingate » Ingate Siparator » Version: 4.3.1

cpe:2.3:h:ingate:ingate_siparator:4.3.1
Ingate » Ingate Siparator » Version: 4.3.4

cpe:2.3:h:ingate:ingate_siparator:4.3.4
Ingate » Ingate Siparator » Version: 4.4.1

cpe:2.3:h:ingate:ingate_siparator:4.4.1
Ingate » Ingate Siparator » Version: 4.4.2

cpe:2.3:h:ingate:ingate_siparator:4.4.2
Ingate » Ingate Siparator » Version: 4.5.1

cpe:2.3:h:ingate:ingate_siparator:4.5.1
Ingate » Ingate Siparator » Version: 4.5.2

cpe:2.3:h:ingate:ingate_siparator:4.5.2
Ingate » Ingate Siparator » Version: 4.6.0

cpe:2.3:h:ingate:ingate_siparator:4.6.0
Ingate » Ingate Siparator » Version: 4.6.1

cpe:2.3:h:ingate:ingate_siparator:4.6.1
Ingate » Ingate Siparator » Version: 4.6.2

cpe:2.3:h:ingate:ingate_siparator:4.6.2
Cisco » Catos » Version: 7.1.1

cpe:2.3:o:cisco:catos:7.1.1
Cisco » Catos » Version: 7.3.1

cpe:2.3:o:cisco:catos:7.3.1
Cisco » Catos » Version: 7.4.1

cpe:2.3:o:cisco:catos:7.4.1
Cisco » Catos » Version: 8.3

cpe:2.3:o:cisco:catos:8.3
Cisco » Cisco Ios » Version: 12.0

cpe:2.3:o:cisco:cisco_ios:12.0
Cisco » Cisco Ios » Version: 12.1

cpe:2.3:o:cisco:cisco_ios:12.1
Cisco » Cisco Ios » Version: 12.2

cpe:2.3:o:cisco:cisco_ios:12.2
Cisco » Cisco Ios » Version: 12.3

cpe:2.3:o:cisco:cisco_ios:12.3
Cisco » Cisco Ios » Version: 12.4

cpe:2.3:o:cisco:cisco_ios:12.4
Cisco » Ios » Version: 10.0

cpe:2.3:o:cisco:ios:10.0
Cisco » Ios » Version: 11.0

cpe:2.3:o:cisco:ios:11.0
Cisco » Ios » Version: 11.1

cpe:2.3:o:cisco:ios:11.1
Cisco » Ios » Version: 11.3

cpe:2.3:o:cisco:ios:11.3
Cisco » Ios » Version: 12.2

cpe:2.3:o:cisco:ios:12.2
Cisco » Ios Xr » Version: 2.0

cpe:2.3:o:cisco:ios_xr:2.0
Cisco » Ios Xr » Version: 3.0

cpe:2.3:o:cisco:ios_xr:3.0
Cisco » Ios Xr » Version: 3.2

cpe:2.3:o:cisco:ios_xr:3.2
Cisco » Ios Xr » Version: 3.3

cpe:2.3:o:cisco:ios_xr:3.3
Cisco » Ios Xr » Version: 3.4

cpe:2.3:o:cisco:ios_xr:3.4
Cisco » Ios Xr » Version: 3.5

cpe:2.3:o:cisco:ios_xr:3.5
Cisco » Ios Xr » Version: 3.6

cpe:2.3:o:cisco:ios_xr:3.6
Cisco » Ios Xr » Version: 3.7

cpe:2.3:o:cisco:ios_xr:3.7
Cisco » Nx Os » Version: 4.0

cpe:2.3:o:cisco:nx_os:4.0
Cisco » Nx Os » Version: 4.0.1

cpe:2.3:o:cisco:nx_os:4.0.1
Cisco » Nx Os » Version: 4.0.2

cpe:2.3:o:cisco:nx_os:4.0.2
Ecos Sourceware » Ecos » Version: 1.1

cpe:2.3:o:ecos_sourceware:ecos:1.1
Ecos Sourceware » Ecos » Version: 1.2.1

cpe:2.3:o:ecos_sourceware:ecos:1.2.1
Ecos Sourceware » Ecos » Version: 1.3.1

cpe:2.3:o:ecos_sourceware:ecos:1.3.1
Ecos Sourceware » Ecos » Version: 2.0

cpe:2.3:o:ecos_sourceware:ecos:2.0
Net-Snmp » Net Snmp » Version: 5.0

cpe:2.3:o:net-snmp:net_snmp:5.0
Net-Snmp » Net Snmp » Version: 5.0.1

cpe:2.3:o:net-snmp:net_snmp:5.0.1
Net-Snmp » Net Snmp » Version: 5.0.2

cpe:2.3:o:net-snmp:net_snmp:5.0.2
Net-Snmp » Net Snmp » Version: 5.0.3

cpe:2.3:o:net-snmp:net_snmp:5.0.3
Net-Snmp » Net Snmp » Version: 5.0.4

cpe:2.3:o:net-snmp:net_snmp:5.0.4
Net-Snmp » Net Snmp » Version: 5.0.5

cpe:2.3:o:net-snmp:net_snmp:5.0.5
Net-Snmp » Net Snmp » Version: 5.0.6

cpe:2.3:o:net-snmp:net_snmp:5.0.6
Net-Snmp » Net Snmp » Version: 5.0.7

cpe:2.3:o:net-snmp:net_snmp:5.0.7
Net-Snmp » Net Snmp » Version: 5.0.8

cpe:2.3:o:net-snmp:net_snmp:5.0.8
Net-Snmp » Net Snmp » Version: 5.0.9

cpe:2.3:o:net-snmp:net_snmp:5.0.9
Net-Snmp » Net Snmp » Version: 5.1

cpe:2.3:o:net-snmp:net_snmp:5.1
Net-Snmp » Net Snmp » Version: 5.1.1

cpe:2.3:o:net-snmp:net_snmp:5.1.1
Net-Snmp » Net Snmp » Version: 5.1.2

cpe:2.3:o:net-snmp:net_snmp:5.1.2
Net-Snmp » Net Snmp » Version: 5.2

cpe:2.3:o:net-snmp:net_snmp:5.2
Net-Snmp » Net Snmp » Version: 5.3

cpe:2.3:o:net-snmp:net_snmp:5.3
Net-Snmp » Net Snmp » Version: 5.3.0.1

cpe:2.3:o:net-snmp:net_snmp:5.3.0.1
Net-Snmp » Net Snmp » Version: 5.4

cpe:2.3:o:net-snmp:net_snmp:5.4
Sun » Solaris » Version: 10.0

cpe:2.3:o:sun:solaris:10.0
Sun » Sunos » Version: 5.10

cpe:2.3:o:sun:sunos:5.10

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-0960

Products

Pricing

Contact Us