Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-2104

Опубликовано: 26 авг. 2012
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:munin-monitoring:munin:2.0:*:*:*:*:*:*:*
cpe:2.3:a:munin-monitoring:munin:2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 88%
0.03694
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
больше 13 лет назад

cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request.

debian
больше 13 лет назад

cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without ...

github
больше 3 лет назад

cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request.

EPSS

Процентиль: 88%
0.03694
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-20