Download
| Alert*
oval:org.secpod.oval:def:1800789
Munin has a local file write vulnerability when CGI graphs are enabled. Setting multiple "upper_limit" GET parameters allows overwriting any file accessible to the www-data user. oval:org.secpod.oval:def:703492 munin: Network-wide graphing framework Munin could be made to overwrite files. oval:org.secpod.oval:def:1800419 Munin has a local file write vulnerability when CGI graphs are enabled. Setting multiple "upper_limit" GET parameters allows overwriting any file accessible to the www-data user. oval:org.secpod.oval:def:112181 Munin is a highly flexible and powerful solution used to create graphs of virtually everything imaginable throughout your network, while still maintaining a rattling ease of installation and configuration. This package contains the grapher/gatherer. You will only need one instance of it in your netw ... oval:org.secpod.oval:def:112193 Munin is a highly flexible and powerful solution used to create graphs of virtually everything imaginable throughout your network, while still maintaining a rattling ease of installation and configuration. This package contains the grapher/gatherer. You will only need one instance of it in your netw ... oval:org.secpod.oval:def:1600691 Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET parameters allows overwriting any file accessible to the www-data user oval:org.secpod.oval:def:52840 munin: Network-wide graphing framework Munin could be made to overwrite files. oval:org.secpod.oval:def:602782 Stevie Trujillo discovered a local file write vulnerability in munin, a network-wide graphing framework, when CGI graphs are enabled. GET parameters are not properly handled, allowing to inject options into munin-cgi-graph and overwriting any file accessible accessible by the user running the cgi-pr ... |