PT-2016-1728 · Debian+1 · Xymond+1

Jccleaver · Publicado 2016-02-26 · Atualizado 2018-10-09 · CVE-2016-2055

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions xymond versions 4.1.x through 4.3.x before 4.3.25

Description The issue is related to a lack of protection for service data in the xymond component of the Debian GNU/Linux operating system. It allows a remote attacker to read arbitrary files in the configuration directory using the "config" command.

Recommendations For versions 4.1.x through 4.3.x before 4.3.25, update to version 4.3.25 or later to resolve the issue. As a temporary workaround, consider restricting access to the "config" command to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2016-1161

BDU:2016-01054

CVE-2016-2055

DLA-488-1

DSA-3495-1

MGASA-2016-0177

Produtos afetados

Alt Linux

Xymond

Referências · 21

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/xymon_info.rb · Exploit
• https://cve.org/CVERecord?id=CVE-2016-2055 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-2055 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-2055 · Nota de Segurança
• http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html · Nota
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8 · Nota
• https://ubuntu.com/security/CVE-2016-2055 · Aviso do Fabricante
• http://securityfocus.com/archive/1/537522/100/0/threaded · Nota
• http://debian.org/security/2016/dsa-3495 · Aviso do Fabricante
• http://lists.xymon.com/pipermail/xymon/2016-February/042986.html · Nota
• https://bdu.fstec.ru/vul/2016-01054 · Nota de Segurança
• https://debian.org/security/2016/dsa-3495 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-2055 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=17846 · Nota
• https://sourceforge.net/p/xymon/code/7890 · Correção