This script is Copyright (C) 2009-2016 Tenable Network Security, Inc.
The SNMP server running on this host is affected by an authentication
SNMPv3 HMAC verification relies on the client to specify the HMAC
length. This makes it possible for remote attackers to bypass SNMP
authentication via repeated attempts with a HMAC length value of 1,
which causes only the first byte of the authentication hash to be
This issue affects SNMP implementations from multiple vendors.
See also :
This vulnerability affects multiple products from multiple vendors.
Check with your vendor for the appropriate solution.
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 9.5
Public Exploit Available : true
Nessus Plugin ID: 40449 ()
Bugtraq ID: 29623
CVE ID: CVE-2008-0960
Upgrade to Nessus Professional today!
Start your free Nessus Cloud trial now!
Begin Free Trial
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.