Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

ganglia: PHP script execution

Package(s):

ganglia

CVE #(s):

CVE-2012-3448

Created:

January 22, 2013

Updated:

January 23, 2013

Description:

From the Debian advisory:

Insufficient input sanitization in Ganglia, a web based monitoring system, could lead to remote PHP script execution with permissions of the user running the web browser.

Alerts:

Debian

DSA-2610-1

2013-01-21

(Log in to post comments)