PT-2016-1726 · Xymon+1 · Xymon+1

Jccleaver · Publicado 2016-02-26 · Atualizado 2018-10-09 · CVE-2016-2057

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Xymon versions 4.1.x through 4.3.x before 4.3.25

Description The issue is related to insufficient access control in the lib/xymond ipc.c component of the Xymon network monitoring tool. This allows a local attacker to inject arbitrary messages into the queue by writing to it.

Recommendations For versions 4.1.x through 4.3.x before 4.3.25, update to version 4.3.25 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2016-1161

BDU:2016-01052

CVE-2016-2057

DSA-3495-1

MGASA-2016-0177

Produtos afetados

Alt Linux

Xymon

Referências · 20

• https://cve.org/CVERecord?id=CVE-2016-2057 · Nota de Segurança
• http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-2057 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2016-2057 · Aviso do Fabricante
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8 · Nota
• http://securityfocus.com/archive/1/537522/100/0/threaded · Nota
• http://debian.org/security/2016/dsa-3495 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-01052 · Nota de Segurança
• https://sourceforge.net/p/xymon/code/7891 · Correção
• https://ubuntu.com/security/CVE-2016-2057 · Aviso do Fabricante
• http://lists.xymon.com/pipermail/xymon/2016-February/042986.html · Nota
• https://debian.org/security/2016/dsa-3495 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=17846 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-2057 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-2057 · Nota de Segurança