CVE-2012-3512

Опубликовано: 21 нояб. 2012

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:munin-monitoring:munin:*:*:*:*:*:*:*:*

Версия до 2.0.5 (включая)

cpe:2.3:a:munin-monitoring:munin:2.0-beta1:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta2:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta3:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta4:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta5:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta6:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta7:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc1:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc2:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc3:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc4:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc5:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc6:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc7:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00082

Низкий

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2012-3512

ubuntu

около 13 лет назад

CVE-2012-3512

debian

около 13 лет назад

Munin before 2.0.6 stores plugin state files that run as root in the s ...

GHSA-g93j-j4g4-hr9q

github

больше 3 лет назад

EPSS

Процентиль: 24%

0.00082

Низкий

7.2 High

CVSS2

Дефекты

CWE-264