MNBSD-2015-13: Insecure permissions on bsnmpd configuration file installation

Severity: Unknown

Affected Package: bsnmpd

Summary: Insecure permissions on bsnmpd configuration file installation

Description

The bsnmpd(1) daemon installed its configuration file with insecure default permissions, exposing sensitive data such as the SNMP community/shared secret to local users. A local user able to read the configuration could obtain the credentials used by the daemon. The fix corrects the configuration file installation permissions.

Affected Versions

bsnmpd

Recommendations

No specific recommendations provided.

References

Additional Information

Aliases: CVE-2015-5677

Published: October 01, 2015
Last Modified: October 01, 2015