CVE-2012-4678
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.027 Low
EPSS
Percentile
90.5%
munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service (disk consumption) via many requests to an image with unique parameters.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| munin-monitoring:munin | munin-monitoring munin | eq | 2.0_rc4 |
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=668667
munin-monitoring.org/changeset/4825
www.openwall.com/lists/oss-security/2012/04/16/5
www.openwall.com/lists/oss-security/2012/04/16/6
www.openwall.com/lists/oss-security/2012/04/18/2
www.openwall.com/lists/oss-security/2012/04/19/3
www.openwall.com/lists/oss-security/2012/04/19/4
www.openwall.com/lists/oss-security/2012/04/19/5
www.openwall.com/lists/oss-security/2012/04/27/7
www.openwall.com/lists/oss-security/2012/04/29/2
www.securityfocus.com/bid/53034
bugzilla.redhat.com/show_bug.cgi?id=812889
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.027 Low
EPSS
Percentile
90.5%