munin-monitoring munin 2.0 rc4 vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

Munin prior to 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.

6.8

CVSSv2

cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote malicious users to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted H...

Munin-monitoring Munin 2.0 Munin-monitoring Munin 2.1

1 EDB exploit

5

CVSSv2

munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote malicious users to cause a denial of service (disk consumption) via many requests to an image with unique parameters.

Munin-monitoring Munin 2.0 Rc4

5

CVSSv2

munin-cgi-graph in Munin 2.0 rc4 allows remote malicious users to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.

Munin-monitoring Munin 2.0 Rc4

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook