CVE-2012-3513

Опубликовано: 21 нояб. 2012

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:munin-monitoring:munin:*:*:*:*:*:*:*:*

Версия до 2.0.5 (включая)

cpe:2.3:a:munin-monitoring:munin:2.0-beta1:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta2:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta3:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta4:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta5:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta6:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-beta7:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc1:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc2:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc3:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc4:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc5:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc6:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0-rc7:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:munin-monitoring:munin:2.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00792

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2012-3513

ubuntu

около 13 лет назад

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.

CVE-2012-3513

debian

около 13 лет назад

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module un ...

GHSA-cfmj-pc5v-pwv8

github

больше 3 лет назад

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.

EPSS

Процентиль: 73%

0.00792

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-264