munin: privilege escalation
| Package(s): | munin | CVE #(s): | CVE-2012-3512 | ||||||||||||||||||||||||
| Created: | September 26, 2012 | Updated: | November 5, 2012 | ||||||||||||||||||||||||
| Description: | From the Red Hat bugzilla:
Currently, plugins which run as root mix their state files in the same directory as non-root plugins. The state directory is owned by munin:munin and is group-writable. Because of these facts, it is possible for an attacker who operates as user munin to cause a root-run plugin to run arbitrary code as root. | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||