CVE-2013-4173: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the trend-data daemon xymondrrd in Xymon 4.x before 4.3.12 allows remote attackers to delete arbitrary files via a .. dot dot in the host name in a "drophost" command...

Xymon 4.x File Deletion

Hi, a security vulnerability has been found in version 4.x of the Xymon Systems & Network Monitor tool https://sourceforge.net/projects/xymon/. Impact ------ The error permits a remote attacker to delete files on the server running the Xymon trend-data daemon "xymondrrd". File deletion is done wi...