Skip to content
OpenAdvisories
Unscored USN-3215-2 0 CVEs

munin regression

Published Mar 3, 2017 · Updated Feb 10, 2026

Summary

USN-3215-1 fixed a vulnerability in Munin. The upstream patch caused a
regression leading to errors being appended to the log file. This update
fixes the problem.

Original advisory details:

It was discovered that Munin incorrectly handled CGI graphs. A remote
attacker could use this issue to overwrite arbitrary files as the www-data
user.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS munin 2.0.19-3ubuntu0.3

References

  • report
    https://launchpad.net/bugs/1669764