User: Password:
Subscribe / Log in / New account

xymon: unauthorized file deletion

Package(s):xymon CVE #(s):CVE-2013-4173
Created:August 12, 2013 Updated:August 14, 2013
Description: From the Mageia advisory:

A security vulnerability has been found in version 4.x of the Xymon Systems & Network Monitor tool

The error permits a remote attacker to delete files on the server running the Xymon trend-data daemon "xymond_rrd". File deletion is done with the privileges of the user that Xymon is running with, so it is limited to files available to the userid running the Xymon service. This includes all historical data stored by the Xymon monitoring system.

Mandriva MDVSA-2013:213 xymon 2013-08-13
Mageia MGASA-2013-0243 xymon 2013-08-11

(Log in to post comments)

Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds