Summary
It was discovered that Munin incorrectly handled CGI graphs. A remote
attacker could use this issue to overwrite arbitrary files as the www-data
user.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | munin | 2.0.19-3ubuntu0.2 |
Vulnerabilities 1
-
Unscored —
Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET…
References
-
report
https://ubuntu.com/security/CVE-2017-6188