3.3

CVE-2016-2057

lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue.

Data is provided by the National Vulnerability Database (NVD)
Xymon ≫ Xymon Version4.1.0
Xymon ≫ Xymon Version4.1.1
Xymon ≫ Xymon Version4.1.2
Xymon ≫ Xymon Version4.1.2 Updatep1
Xymon ≫ Xymon Version4.1.2 Updatep2
Xymon ≫ Xymon Version4.2 Updatealfa
Xymon ≫ Xymon Version4.2 Updatebeta20060605
Xymon ≫ Xymon Version4.2 Updaterc20060712
Xymon ≫ Xymon Version4.2.0
Xymon ≫ Xymon Version4.2.2
Xymon ≫ Xymon Version4.2.2 Updaterc1
Xymon ≫ Xymon Version4.2.3
Xymon ≫ Xymon Version4.2.3 Updaterc1
Xymon ≫ Xymon Version4.3.0
Xymon ≫ Xymon Version4.3.0 Updatebeta1
Xymon ≫ Xymon Version4.3.0 Updatebeta2
Xymon ≫ Xymon Version4.3.0 Updatebeta3
Xymon ≫ Xymon Version4.3.0 Updaterc1
Xymon ≫ Xymon Version4.3.1
Xymon ≫ Xymon Version4.3.2
Xymon ≫ Xymon Version4.3.3
Xymon ≫ Xymon Version4.3.4
Xymon ≫ Xymon Version4.3.5
Xymon ≫ Xymon Version4.3.6
Xymon ≫ Xymon Version4.3.7
Xymon ≫ Xymon Version4.3.8
Xymon ≫ Xymon Version4.3.9
Xymon ≫ Xymon Version4.3.10
Xymon ≫ Xymon Version4.3.11
Xymon ≫ Xymon Version4.3.12
Xymon ≫ Xymon Version4.3.13
Xymon ≫ Xymon Version4.3.14
Xymon ≫ Xymon Version4.3.15
Xymon ≫ Xymon Version4.3.16
Xymon ≫ Xymon Version4.3.17
Xymon ≫ Xymon Version4.3.18
Xymon ≫ Xymon Version4.3.19
Xymon ≫ Xymon Version4.3.19 Updaterc1
Xymon ≫ Xymon Version4.3.20
Xymon ≫ Xymon Version4.3.21
Xymon ≫ Xymon Version4.3.22
Xymon ≫ Xymon Version4.3.23
Xymon ≫ Xymon Version4.3.24
Debian ≫ Debian Linux Version8.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.1% 0.245
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.3 1.8 1.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N