Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-3513
cve-2012-3513
munin
cgi
apache
remote attackers
files creation
security vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.9%
munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.
Affected configurations
Node
munin-monitoringmuninRange≤2.0.5
ORmunin-monitoringmuninMatch2.0-beta1
ORmunin-monitoringmuninMatch2.0-beta2
ORmunin-monitoringmuninMatch2.0-beta3
ORmunin-monitoringmuninMatch2.0-beta4
ORmunin-monitoringmuninMatch2.0-beta5
ORmunin-monitoringmuninMatch2.0-beta6
ORmunin-monitoringmuninMatch2.0-beta7
ORmunin-monitoringmuninMatch2.0-rc1
ORmunin-monitoringmuninMatch2.0-rc2
ORmunin-monitoringmuninMatch2.0-rc3
ORmunin-monitoringmuninMatch2.0-rc4
ORmunin-monitoringmuninMatch2.0-rc5
ORmunin-monitoringmuninMatch2.0-rc6
ORmunin-monitoringmuninMatch2.0-rc7
ORmunin-monitoringmuninMatch2.0.0
ORmunin-monitoringmuninMatch2.0.1
ORmunin-monitoringmuninMatch2.0.2
ORmunin-monitoringmuninMatch2.0.3
ORmunin-monitoringmuninMatch2.0.4
Related
nvd
nvd
CVE-2012-3513
2012-11-21 23:55:01
cvelist
cvelist
CVE-2012-3513
2022-10-03 16:15:22
ubuntucve
ubuntucve
CVE-2012-3513
2012-08-22 00:00:00
prion
prion
Command injection
2012-11-21 23:55:00
debiancve
debiancve
CVE-2012-3513
2022-10-03 16:15:22
nessus
nessus
Munin Resource Monitoring < 2.0.6 Multiple Vulnerabilities
2013-07-26 00:00:00
Mandriva Linux Security Advisory : munin (MDVSA-2013:105)
2013-04-20 00:00:00
gentoo
gentoo
Munin: Multiple vulnerabilities
2014-05-18 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1622-1)
2012-11-06 00:00:00
Ubuntu Update for munin USN-1622-1
2012-11-06 00:00:00
Gentoo Security Advisory GLSA 201405-17
2015-09-29 00:00:00
securityvulns
securityvulns
[USN-1622-1] Munin vulnerabilities
2012-11-06 00:00:00
Munin security vulnerabilities
2012-11-06 00:00:00
ubuntu
ubuntu
Munin vulnerabilities
2012-11-05 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.9%
Related for CVE-2012-3513