Download
| Alert*
oval:org.secpod.oval:def:106654
smokeping is installed oval:org.secpod.oval:def:602287 Tero Marttila discovered that the Debian packaging for smokeping installed it in such a way that the CGI implementation of Apache httpd passed additional arguments to the smokeping_cgi program, potentially leading to arbitrary code execution in response to crafted HTTP requests. oval:org.secpod.oval:def:600996 A cross-site scripting vulnerability was discovered in smokeping, a latency logging and graphing system. Input passed to the "displaymode" parameter was not properly sanitized. An attacker could use this flaw to execute arbitrary HTML and script code in a user"s browser session in the cont ... oval:org.secpod.oval:def:105857 SmokePing is a latency logging and graphing system. It consists of a daemon process which organizes the latency measurements and a CGI which presents the graphs. oval:org.secpod.oval:def:601544 smokeping is installed |