3.3

CVE-2016-2057

lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xymon ≫ Xymon Version 4.1.0
Xymon ≫ Xymon Version 4.1.1
Xymon ≫ Xymon Version 4.1.2
Xymon ≫ Xymon Version 4.1.2 Update p1
Xymon ≫ Xymon Version 4.1.2 Update p2
Xymon ≫ Xymon Version 4.2 Update alfa
Xymon ≫ Xymon Version 4.2 Update beta20060605
Xymon ≫ Xymon Version 4.2 Update rc20060712
Xymon ≫ Xymon Version 4.2.0
Xymon ≫ Xymon Version 4.2.2
Xymon ≫ Xymon Version 4.2.2 Update rc1
Xymon ≫ Xymon Version 4.2.3
Xymon ≫ Xymon Version 4.2.3 Update rc1
Xymon ≫ Xymon Version 4.3.0
Xymon ≫ Xymon Version 4.3.0 Update beta1
Xymon ≫ Xymon Version 4.3.0 Update beta2
Xymon ≫ Xymon Version 4.3.0 Update beta3
Xymon ≫ Xymon Version 4.3.0 Update rc1
Xymon ≫ Xymon Version 4.3.1
Xymon ≫ Xymon Version 4.3.2
Xymon ≫ Xymon Version 4.3.3
Xymon ≫ Xymon Version 4.3.4
Xymon ≫ Xymon Version 4.3.5
Xymon ≫ Xymon Version 4.3.6
Xymon ≫ Xymon Version 4.3.7
Xymon ≫ Xymon Version 4.3.8
Xymon ≫ Xymon Version 4.3.9
Xymon ≫ Xymon Version 4.3.10
Xymon ≫ Xymon Version 4.3.11
Xymon ≫ Xymon Version 4.3.12
Xymon ≫ Xymon Version 4.3.13
Xymon ≫ Xymon Version 4.3.14
Xymon ≫ Xymon Version 4.3.15
Xymon ≫ Xymon Version 4.3.16
Xymon ≫ Xymon Version 4.3.17
Xymon ≫ Xymon Version 4.3.18
Xymon ≫ Xymon Version 4.3.19
Xymon ≫ Xymon Version 4.3.19 Update rc1
Xymon ≫ Xymon Version 4.3.20
Xymon ≫ Xymon Version 4.3.21
Xymon ≫ Xymon Version 4.3.22
Xymon ≫ Xymon Version 4.3.23
Xymon ≫ Xymon Version 4.3.24
Debian ≫ Debian Linux Version 8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.369
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.3 1.8 1.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html
http://www.debian.org/security/2016/dsa-3495
http://www.securityfocus.com/archive/1/537522/100/0/threaded
https://sourceforge.net/p/xymon/code/7891/
Patch