NVD

Id
43953  
Name
CVE-2012-2104  
Description
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-26  
Modified Date
2012-08-27  
Seq
2012-2104  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220803 43953 CVE-2012-2104 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668666  View
220804 43953 CVE-2012-2104 [oss-security] 20120416 CVE Request (minor) -- Two Munin graphing framework flaws  View
220805 43953 CVE-2012-2104 [oss-security] 20120416 Re: CVE Request (minor) -- Two Munin graphing framework flaws  View
220806 43953 CVE-2012-2104 53032  View
220807 43953 CVE-2012-2104 munin-munincgigraphlog-command-execution(74885)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28199 JVNDB-2012-003906 Munin の cgi-bin/munin-cgi-graph における任意のコマンドを実行される脆弱性 Munin の cgi-bin/munin-cgi-graph は、非印字可能文字 (non-printable characters) を削除せずにログファイルにデータを書き込むため、ターミナルエミュレータのエスケープシーケンスを挿入され、任意のコマンドを実行される、または任意のファイルを削除される脆弱性が存在します。 CVE-2012-2104 55342 CVE-2012-2104 43953 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003906.html 2012-08-26 2012-08-29 View