Vulnerability in Debian Linux
CVE-2015-0859
The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments.
EPSS: 0.023 (81.7th percentile) — read the EPSS interpretation.
Affected products
- Debian Debian_linux — versions 7.0, 8.0
- N/a — versions n/a
Weakness classification (CWE)
References
- security@debian.org (vendor-advisory, x_refsource_DEBIAN, Vendor Advisory)