Vulnerability in Munin-Monitoring Munin

CVE-2012-3513

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.

EPSS: 0.024 (82.1th percentile) — read the EPSS interpretation.

Affected products

Munin-monitoring Munin — versions 2.0-beta1, 2.0-beta2, 2.0-beta3
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (Exploit, x_refsource_MISC, Vendor Advisory)