Medium severity5.5NVD Advisory· Published Feb 7, 2017· Updated Jun 17, 2026

CVE-2015-5677

Description

bsnmpd, as used in FreeBSD 9.3, 10.1, and 10.2, uses world-readable permissions on the snmpd.config file, which allows local users to obtain the secret key for USM authentication by reading the file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeBSD/FreeBSD4 versions
cpe:2.3:o:freebsd:freebsd:10.1:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:freebsd:freebsd:10.1:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.2:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:*:*:*:*:*:*:*
- (no CPE)range: 9.3, 10.1, and 10.2
FreeBSD/bsnmpdllm-fuzzy

Patches

Vulnerability mechanics

References

www.freebsd.org/security/advisories/FreeBSD-SA-16:06.bsnmpd.ascnvdPatchVendor Advisory
pierrekim.github.io/blog/2016-01-15-cve-2015-5677-freebsd-bsnmpd.htmlnvdExploitThird Party Advisory
www.securitytracker.com/id/1034678nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000