CVE-2020-15861
Description
Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.
Risk Information
Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.433
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) snmpd_5.8+dfsg-2ubuntu2.3_i386.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) snmpd_5.8+dfsg-2ubuntu2.3_amd64.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) snmpd_5.7.3+dfsg-1ubuntu4.5_i386.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) snmpd_5.7.3+dfsg-1ubuntu4.5_amd64.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) snmpd_5.7.3+dfsg-1.8ubuntu3.5_i386.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) snmpd_5.7.3+dfsg-1.8ubuntu3.5_amd64.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp30_5.7.3+dfsg-1ubuntu4.5_i386.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp30_5.7.3+dfsg-1ubuntu4.5_amd64.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp30_5.7.3+dfsg-1.8ubuntu3.5_i386.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp30_5.7.3+dfsg-1.8ubuntu3.5_amd64.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp35_5.8+dfsg-2ubuntu2.3_i386.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp35_5.8+dfsg-2ubuntu2.3_amd64.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp-base_5.8+dfsg-2ubuntu2.3_all.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp-base_5.7.3+dfsg-1ubuntu4.5_all.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp-base_5.7.3+dfsg-1.8ubuntu3.5_all.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp-perl_5.8+dfsg-2ubuntu2.3_i386.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp-perl_5.8+dfsg-2ubuntu2.3_amd64.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp-perl_5.7.3+dfsg-1ubuntu4.5_i386.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp-perl_5.7.3+dfsg-1ubuntu4.5_amd64.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp-perl_5.7.3+dfsg-1.8ubuntu3.5_i386.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp-perl_5.7.3+dfsg-1.8ubuntu3.5_amd64.deb | Linux |
| SNMP (Simple Network Management Protocol) server and applications (USN-4471-1) libsnmp-base_5.8+dfsg-2ubuntu2.3_all.deb | Linux |
| Improper Link Resolution Before File Access (Link Following) Vulnerability (CVE-2020-15861) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234