Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

smokeping smokeping vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2017-20147
In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that file, the smokeping user can cause a denial of service to arbitrary PIDs when the service is stopped.
Smokeping Smokeping
NA
CVE-2016-20015
In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown.
Smokeping Smokeping
4.3
CVSSv2
CVE-2013-4158
smokeping prior to 2.6.9 has XSS (incomplete fix for CVE-2012-0790)
Smokeping SmokepingDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 18Fedoraproject Fedora 19
4.3
CVSSv2
CVE-2013-4168
Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields.
Smokeping Smokeping 2.6.9Debian Debian Linux 8.0Debian Debian Linux 10.0Debian Debian Linux 9.0Fedoraproject Fedora 18Fedoraproject Fedora 19
7.5
CVSSv2
CVE-2015-0859
The Debian build procedure for the smokeping package in wheezy prior to 2.6.8-2+deb7u1 and jessie prior to 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote malicious users to execute arbitrary code via crafted ...
Debian Debian Linux 8.0Debian Debian Linux 7.0
6.8
CVSSv2
CVE-2010-5111
Multiple buffer overflows in readline.c in Echoping 6.0.2 allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted reply in the (1) TLS_readline or (2) SSL_readline function, related to the EchoPingHttps Smokeping probe.
Echoping Project Echoping 6.0.2
4.3
CVSSv2
CVE-2012-0790
Cross-site scripting (XSS) vulnerability in smokeping_cgi in Smokeping 2.4.2, 2.6.6, and other versions prior to 2.6.7 allows remote malicious users to inject arbitrary web script or HTML via the displaymode parameter.
Oetiker Smokeping 2.6.2Oetiker Smokeping 2.6.0Oetiker Smokeping 2.4.0Oetiker Smokeping 2.3.5Oetiker SmokepingOetiker Smokeping 2.6.5Oetiker Smokeping 2.6.4Oetiker Smokeping 2.3.3Oetiker Smokeping 2.3.2Oetiker Smokeping 2.3.1Oetiker Smokeping 2.3.0Oetiker Smokeping 2.0.6Oetiker Smokeping 2.0.5Oetiker Smokeping 2.0.4Oetiker Smokeping 2.0.3Oetiker Smokeping 1.28Oetiker Smokeping 1.27Oetiker Smokeping 1.26Oetiker Smokeping 1.25Oetiker Smokeping 1.12Oetiker Smokeping 1.11Oetiker Smokeping 1.10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook