CVE-2017-6188

2017-02-2200:00:00

ubuntu.com

0.0004 Low

EPSS

Percentile

5.2%

JSON

Munin before 2.999.6 has a local file write vulnerability when CGI graphs
are enabled. Setting multiple upper_limit GET parameters allows overwriting
any file accessible to the www-data user.

Bugs

<https://github.com/munin-monitoring/munin/issues/721>
<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855705>

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchmunin< 2.0.19-3ubuntu0.2UNKNOWN
ubuntu16.04noarchmunin< 2.0.25-2ubuntu0.16.04.2UNKNOWN
ubuntu16.10noarchmunin< 2.0.25-2ubuntu0.16.10.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	munin	< 2.0.19-3ubuntu0.2	UNKNOWN
ubuntu	16.04	noarch	munin	< 2.0.25-2ubuntu0.16.04.2	UNKNOWN
ubuntu	16.10	noarch	munin	< 2.0.25-2ubuntu0.16.10.2	UNKNOWN