CVE-2012-3513

Published: Nov 21, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.

Affected (20)

Products: Munin Monitoring: Munin

Munin Monitoring

1 product

Munin

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Munin Monitoring Munin	Up to 2.0.5
Munin Monitoring Munin	Version 2.0-beta1
Munin Monitoring Munin	Version 2.0-beta2
Munin Monitoring Munin	Version 2.0-beta3
Munin Monitoring Munin	Version 2.0-beta4
Munin Monitoring Munin	Version 2.0-beta5
Munin Monitoring Munin	Version 2.0-beta6
Munin Monitoring Munin	Version 2.0-beta7
Munin Monitoring Munin	Version 2.0-rc1
Munin Monitoring Munin	Version 2.0-rc2
Munin Monitoring Munin	Version 2.0-rc3
Munin Monitoring Munin	Version 2.0-rc4
Munin Monitoring Munin	Version 2.0-rc5
Munin Monitoring Munin	Version 2.0-rc6
Munin Monitoring Munin	Version 2.0-rc7
Munin Monitoring Munin	Version 2.0.0
Munin Monitoring Munin	Version 2.0.1
Munin Monitoring Munin	Version 2.0.2
Munin Monitoring Munin	Version 2.0.3
Munin Monitoring Munin	Version 2.0.4