CVE-2012-3448

Published: Aug 6, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.

Affected (14)

Products: Ganglia: Ganglia Web

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Ganglia Ganglia Web	version ≤ 3.5.0
Ganglia Ganglia Web	Version 2.1.0
Ganglia Ganglia Web	Version 2.1.1
Ganglia Ganglia Web	Version 2.1.2
Ganglia Ganglia Web	Version 2.1.3
Ganglia Ganglia Web	Version 2.1.5
Ganglia Ganglia Web	Version 2.1.6
Ganglia Ganglia Web	Version 2.1.7
Ganglia Ganglia Web	Version 2.1.8
Ganglia Ganglia Web	Version 2.2.0
Ganglia Ganglia Web	Version 3.3.0
Ganglia Ganglia Web	Version 3.3.1
Ganglia Ganglia Web	Version 3.4.1
Ganglia Ganglia Web	Version 3.4.2

References (22)

http://ganglia.info/?p=549

Source: secalert@redhat.com

PatchVendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084196.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084202.html

Source: secalert@redhat.com

http://secunia.com/advisories/50047

Source: secalert@redhat.com

Vendor Advisory

http://www.debian.org/security/2013/dsa-2610

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/08/02/1

Source: secalert@redhat.com

http://www.securityfocus.com/bid/54699

Source: secalert@redhat.com

https://bugs.gentoo.org/show_bug.cgi?id=428776

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=845124

Source: secalert@redhat.com

https://www.exploit-db.com/exploits/38030/

Source: secalert@redhat.com

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00136.html

Source: secalert@redhat.com

http://ganglia.info/?p=549

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084196.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084202.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/50047

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.debian.org/security/2013/dsa-2610

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/08/02/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/54699

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.gentoo.org/show_bug.cgi?id=428776

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=845124

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/38030/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00136.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.