CVE-2008-7095 | BDVDB-2026-38121 Detail

Description#

The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to (1) read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName (1.3.6.1.6.3.18.1.1.1.2) or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName (1.3.6.1.6.3.16.1.2.1.3) with knowledge of one community string, and (2) read SNMPv3 user names via SNMP-USER-BASED-SM-MIB or SNMP-VIEW-BASED-ACM-MIB.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/498033/100/0/threaded
http://osvdb.org/51916
http://www.securityfocus.com/bid/32102

Exploit#

No public exploit known

History#

Version 12009-08-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.