Skip to content
OpenAdvisories
Unscored DSA-3495-1 5 CVEs

xymon - security update

Published Feb 28, 2016 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 xymon 4.3.17-6+deb8u1

Vulnerabilities 5

  • Unscored —

    Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote atta…

  • Unscored —
    CVE-2016-2055 Public exploit EPSS 18%

    xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files…

  • Unscored —
    CVE-2016-2056 Public exploit EPSS 55%

    xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands vi…

  • Unscored —

    lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC messa…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xym…