Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xymon xymon 4.3.7 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2016-2054
Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x prior to 4.3.25 allow remote malicious users to execute arbitrary code or cause a denial of service (daemon crash) via a long filename, involving handling a "config" command.
Debian Debian Linux 8.0Xymon Xymon 4.3.3Xymon Xymon 4.3.24Xymon Xymon 4.3.19Xymon Xymon 4.3.18Xymon Xymon 4.3.11Xymon Xymon 4.3.10Xymon Xymon 4.2.3Xymon Xymon 4.2.2Xymon Xymon 4.1.2Xymon Xymon 4.3.8Xymon Xymon 4.3.7Xymon Xymon 4.3.6Xymon Xymon 4.3.21Xymon Xymon 4.3.20Xymon Xymon 4.3.15Xymon Xymon 4.3.14Xymon Xymon 4.3.0Xymon Xymon 4.2Xymon Xymon 4.3.5Xymon Xymon 4.3.4Xymon Xymon 4.3.2
5
CVSSv2
CVE-2016-2055
xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x prior to 4.3.25 allow remote malicious users to read arbitrary files in the configuration directory via a "config" command.
Xymon Xymon 4.3.9Xymon Xymon 4.3.8Xymon Xymon 4.3.23Xymon Xymon 4.3.22Xymon Xymon 4.3.17Xymon Xymon 4.3.16Xymon Xymon 4.3.0Xymon Xymon 4.2.2Xymon Xymon 4.2.0Xymon Xymon 4.1.1Xymon Xymon 4.1.0Xymon Xymon 4.3.5Xymon Xymon 4.3.4Xymon Xymon 4.3.2Xymon Xymon 4.3.19Xymon Xymon 4.3.13Xymon Xymon 4.3.12Xymon Xymon 4.2.3Xymon Xymon 4.2Xymon Xymon 4.1.2Xymon Xymon 4.3.3Xymon Xymon 4.3.24
6.5
CVSSv2
CVE-2016-2056
xymond in Xymon 4.1.x, 4.2.x, and 4.3.x prior to 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c.
Xymon Xymon 4.3.5Xymon Xymon 4.3.4Xymon Xymon 4.3.2Xymon Xymon 4.3.19Xymon Xymon 4.3.13Xymon Xymon 4.3.12Xymon Xymon 4.3.0Xymon Xymon 4.2.3Xymon Xymon 4.2Xymon Xymon 4.1.2Xymon Xymon 4.3.9Xymon Xymon 4.3.8Xymon Xymon 4.3.23Xymon Xymon 4.3.22Xymon Xymon 4.3.17Xymon Xymon 4.3.16Xymon Xymon 4.2.2Xymon Xymon 4.2.0Xymon Xymon 4.1.1Xymon Xymon 4.1.0Xymon Xymon 4.3.7Xymon Xymon 4.3.6
2.1
CVSSv2
CVE-2016-2057
lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x prior to 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue.
Xymon Xymon 4.3.24Xymon Xymon 4.3.23Xymon Xymon 4.3.17Xymon Xymon 4.3.16Xymon Xymon 4.3.9Xymon Xymon 4.3.8Xymon Xymon 4.3.0Xymon Xymon 4.2.2Xymon Xymon 4.1.2Xymon Xymon 4.1.1Xymon Xymon 4.1.0Xymon Xymon 4.3.22Xymon Xymon 4.3.21Xymon Xymon 4.3.15Xymon Xymon 4.3.14Xymon Xymon 4.3.7Xymon Xymon 4.3.6Xymon Xymon 4.2.0Xymon Xymon 4.2Xymon Xymon 4.3.19Xymon Xymon 4.3.18Xymon Xymon 4.3.11
3.5
CVSSv2
CVE-2016-2058
Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x prior to 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is not properly handled in the "detailed status" page, or (2) remote au...
Debian Debian Linux 8.0Xymon Xymon 4.3.7Xymon Xymon 4.3.6Xymon Xymon 4.3.5Xymon Xymon 4.3.4Xymon Xymon 4.3.2Xymon Xymon 4.3.19Xymon Xymon 4.3.12Xymon Xymon 4.3.11Xymon Xymon 4.3.0Xymon Xymon 4.2.3Xymon Xymon 4.2Xymon Xymon 4.1.2Xymon Xymon 4.3.9Xymon Xymon 4.3.8Xymon Xymon 4.3.23Xymon Xymon 4.3.22Xymon Xymon 4.3.17Xymon Xymon 4.3.16Xymon Xymon 4.2.2Xymon Xymon 4.2.0Xymon Xymon 4.1.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook