Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

munin-monitoring munin 2.0-rc6 vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv2
CVE-2012-3512
Munin prior to 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.
Munin-monitoring Munin 2.0.4Munin-monitoring Munin 2.0.3Munin-monitoring Munin 2.0-rc4Munin-monitoring Munin 2.0-rc3Munin-monitoring Munin 2.0-beta1Munin-monitoring Munin 2.0-rc2Munin-monitoring MuninMunin-monitoring Munin 2.0-rc6Munin-monitoring Munin 2.0-rc5Munin-monitoring Munin 2.0-beta3Munin-monitoring Munin 2.0-beta2Munin-monitoring Munin 2.0.0Munin-monitoring Munin 2.0-rc7Munin-monitoring Munin 2.0-beta5Munin-monitoring Munin 2.0-beta4Munin-monitoring Munin 2.0.2Munin-monitoring Munin 2.0.1Munin-monitoring Munin 2.0-rc1Munin-monitoring Munin 2.0-beta7Munin-monitoring Munin 2.0-beta6
9.3
CVSSv2
CVE-2012-3513
munin-cgi-graph in Munin prior to 2.0.6, when running as a CGI module under Apache, allows remote malicious users to load new configurations and create files in arbitrary directories via the logdir command.
Munin-monitoring Munin 2.0-beta7Munin-monitoring Munin 2.0-beta6Munin-monitoring Munin 2.0-beta5Munin-monitoring Munin 2.0-beta4Munin-monitoring Munin 2.0.4Munin-monitoring Munin 2.0-rc5Munin-monitoring Munin 2.0-rc3Munin-monitoring Munin 2.0-beta2Munin-monitoring Munin 2.0-rc2Munin-monitoring Munin 2.0.2Munin-monitoring Munin 2.0.1Munin-monitoring Munin 2.0.0Munin-monitoring Munin 2.0-rc7Munin-monitoring Munin 2.0-rc6Munin-monitoring MuninMunin-monitoring Munin 2.0.3Munin-monitoring Munin 2.0-rc4Munin-monitoring Munin 2.0-rc1Munin-monitoring Munin 2.0-beta3Munin-monitoring Munin 2.0-beta1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook