NVD

Id
18362  
Name
CVE-2016-2056  
Description
xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-13  
Modified Date
2016-04-18  
Seq
2016-2056  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
101638 18362 CVE-2016-2056 http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html  View
101639 18362 CVE-2016-2056 DSA-3495  View
101640 18362 CVE-2016-2056 20160214 Xymon: Critical security issues in all versions prior to 4.3.25  View
101641 18362 CVE-2016-2056 https://sourceforge.net/p/xymon/code/7892/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1327 JVNDB-2016-002100 Xymon の xymond における任意のコマンドを実行される脆弱性 Xymon の xymond には、任意のコマンドを実行される脆弱性が存在します。 CVE-2016-2056 88562 CVE-2016-2056 18362 6.5 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002100.html 2016-02-08 2016-04-19 View