Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

munin-monitoring munin vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2013-6048
The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin prior to 2.0.18 allows remote nodes to cause a denial of service (infinite loop and memory consumption in the munin-html process) via crafted multigraph data.
Munin-monitoring Munin 2.0.14Munin-monitoring Munin 2.0.13Munin-monitoring Munin 2.0.7Munin-monitoring Munin 2.0.6Munin-monitoring Munin 2.0.16Munin-monitoring Munin 2.0.15Munin-monitoring Munin 2.0.9Munin-monitoring Munin 2.0.8Munin-monitoring Munin 2.0.0Munin-monitoring MuninMunin-monitoring Munin 2.0.11.1Munin-monitoring Munin 2.0.10Munin-monitoring Munin 2.0.3Munin-monitoring Munin 2.0.2Munin-monitoring Munin 2.0.1Munin-monitoring Munin 2.0.12Munin-monitoring Munin 2.0.11Munin-monitoring Munin 2.0.5Munin-monitoring Munin 2.0.4
4.3
CVSSv2
CVE-2013-6359
Munin::Master::Node in Munin prior to 2.0.18 allows remote malicious users to cause a denial of service (abort data collection for node) via a plugin that uses "multigraph" as a multigraph service name.
Munin-monitoring MuninMunin-monitoring Munin 2.0.16Munin-monitoring Munin 2.0.10Munin-monitoring Munin 2.0.9Munin-monitoring Munin 2.0.2Munin-monitoring Munin 2.0.1Munin-monitoring Munin 2.0.11Munin-monitoring Munin 2.0.11.1Munin-monitoring Munin 2.0.4Munin-monitoring Munin 2.0.3Munin-monitoring Munin 2.0.13Munin-monitoring Munin 2.0.12Munin-monitoring Munin 2.0.6Munin-monitoring Munin 2.0.5Munin-monitoring Munin 2.0.15Munin-monitoring Munin 2.0.14Munin-monitoring Munin 2.0.8Munin-monitoring Munin 2.0.7Munin-monitoring Munin 2.0.0
7.2
CVSSv2
CVE-2012-3512
Munin prior to 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.
Munin-monitoring Munin 2.0.4Munin-monitoring Munin 2.0.3Munin-monitoring Munin 2.0-rc4Munin-monitoring Munin 2.0-rc3Munin-monitoring Munin 2.0-beta1Munin-monitoring Munin 2.0-rc2Munin-monitoring MuninMunin-monitoring Munin 2.0-rc6Munin-monitoring Munin 2.0-rc5Munin-monitoring Munin 2.0-beta3Munin-monitoring Munin 2.0-beta2Munin-monitoring Munin 2.0.0Munin-monitoring Munin 2.0-rc7Munin-monitoring Munin 2.0-beta5Munin-monitoring Munin 2.0-beta4Munin-monitoring Munin 2.0.2Munin-monitoring Munin 2.0.1Munin-monitoring Munin 2.0-rc1Munin-monitoring Munin 2.0-beta7Munin-monitoring Munin 2.0-beta6
9.3
CVSSv2
CVE-2012-3513
munin-cgi-graph in Munin prior to 2.0.6, when running as a CGI module under Apache, allows remote malicious users to load new configurations and create files in arbitrary directories via the logdir command.
Munin-monitoring Munin 2.0-beta7Munin-monitoring Munin 2.0-beta6Munin-monitoring Munin 2.0-beta5Munin-monitoring Munin 2.0-beta4Munin-monitoring Munin 2.0.4Munin-monitoring Munin 2.0-rc5Munin-monitoring Munin 2.0-rc3Munin-monitoring Munin 2.0-beta2Munin-monitoring Munin 2.0-rc2Munin-monitoring Munin 2.0.2Munin-monitoring Munin 2.0.1Munin-monitoring Munin 2.0.0Munin-monitoring Munin 2.0-rc7Munin-monitoring Munin 2.0-rc6Munin-monitoring MuninMunin-monitoring Munin 2.0.3Munin-monitoring Munin 2.0-rc4Munin-monitoring Munin 2.0-rc1Munin-monitoring Munin 2.0-beta3Munin-monitoring Munin 2.0-beta1
6.8
CVSSv2
CVE-2012-2104
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote malicious users to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted H...
Munin-monitoring Munin 2.0Munin-monitoring Munin 2.1
5
CVSSv2
CVE-2012-4678
munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote malicious users to cause a denial of service (disk consumption) via many requests to an image with unique parameters.
Munin-monitoring Munin 2.0 Rc4
1.2
CVSSv2
CVE-2012-2103
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Munin-monitoring Munin 1.4.5
5
CVSSv2
CVE-2012-2147
munin-cgi-graph in Munin 2.0 rc4 allows remote malicious users to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.
Munin-monitoring Munin 2.0 Rc4
1.9
CVSSv2
CVE-2017-6188
Munin prior to 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET parameters allows overwriting any file accessible to the www-data user.
Munin-monitoring MuninDebian Debian Linux 8.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook