CVE-2015-5677

The CVE-2015-5677 issue affects FreeBSD’s bsnmpd in 9.3, 10.1 and 10.2, where the snmpd.config file has world-readable permissions (0644) allowing a local user to read the USM shared secret. This is due to insecure default permissions on the configuration file, enabling potential disclosure of th...

CVE-2015-5677

bsnmpd, as used in FreeBSD 9.3, 10.1, and 10.2, uses world-readable permissions on the snmpd.config file, which allows local users to obtain the secret key for USM authentication by reading the file...