munin-monitoring Munin 2.0.6

CPE Details

munin-monitoring Munin 2.0.6
munin-monitoring
munin
2.0.6
2012-11-22
12h08 +00:00
2013-12-16
16h33 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:munin-monitoring:munin:2.0.6:*:*:*:*:*:*:*

Informations

Vendor

munin-monitoring

Product

munin

Version

2.0.6

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2017-6188 2017-02-22 18h00 +00:00 Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET parameters allows overwriting any file accessible to the www-data user.
5.5
Medium
CVE-2013-6048 2013-12-13 16h00 +00:00 The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service (infinite loop and memory consumption in the munin-html process) via crafted multigraph data.
5
CVE-2013-6359 2013-12-13 16h00 +00:00 Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection for node) via a plugin that uses "multigraph" as a multigraph service name.
4.3
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.