CVE-2012-2103
Published: 26 August 2012
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Priority
Status
Package | Release | Status |
---|---|---|
munin Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
lucid |
Released
(1.4.4-1ubuntu1.2)
|
|
natty |
Ignored
(end of life)
|
|
oneiric |
Released
(1.4.5-3ubuntu4.11.10.2)
|
|
precise |
Released
(1.4.6-3ubuntu3.3)
|
|
quantal |
Not vulnerable
(2.0.2-1ubuntu2)
|
|
upstream |
Needs triage
|
|
Patches: upstream: http://anonscm.debian.org/gitweb/?p=collab-maint/munin.git;a=commit;h=d09365dbbbd530b78818a61bdf2c69f8b275bd4a |
||
This vulnerability is mitigated in part by the use of symlink restrictions in Ubuntu. |