Lucene search

K
osvGoogleOSV:DSA-2640-1
HistoryMar 14, 2013 - 12:00 a.m.

zoneminder - several issues

2013-03-1400:00:00
Google
osv.dev
8

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple vulnerabilities were discovered in zoneminder, a Linux video
camera security and surveillance solution. The Common Vulnerabilities
and Exposures project identifies the following problems:

  • CVE-2013-0232
    Brendan Coles discovered that zoneminder is prone to an arbitrary
    command execution vulnerability. Remote (authenticated) attackers
    could execute arbitrary commands as the web server user.
  • CVE-2013-0332
    zoneminder is prone to a local file inclusion vulnerability. Remote
    attackers could examine files on the system running zoneminder.

For the stable distribution (squeeze), these problems have been fixed in
version 1.24.2-8+squeeze1.

For the testing distribution (wheezy), these problems have been fixed in
version 1.25.0-4.

For the unstable distribution (sid), these problems have been fixed in
version 1.25.0-4.

We recommend that you upgrade your zoneminder packages.

CPENameOperatorVersion
zonemindereq1.24.2-8

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P