CVE-2016-2054

Published: Apr 13, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long filename, involving handling a "config" command.

Affected (44)

Products: Debian: Debian Linux · Xymon: Xymon

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration B

43 vulnerable

Vulnerable Software	Affected Versions
Xymon Xymon	Version 4.1.0
Xymon Xymon	Version 4.1.1
Xymon Xymon	Version 4.1.2
Xymon Xymon	Version 4.1.2 p1
Xymon Xymon	Version 4.1.2 p2
Xymon Xymon	Version 4.2.0
Xymon Xymon	Version 4.2.2
Xymon Xymon	Version 4.2.2 rc1
Xymon Xymon	Version 4.2.3
Xymon Xymon	Version 4.2.3 rc1
Xymon Xymon	Version 4.2 alfa
Xymon Xymon	Version 4.2 beta20060605
Xymon Xymon	Version 4.2 rc20060712
Xymon Xymon	Version 4.3.0
Xymon Xymon	Version 4.3.0 beta1
Xymon Xymon	Version 4.3.0 beta2
Xymon Xymon	Version 4.3.0 beta3
Xymon Xymon	Version 4.3.0 rc1
Xymon Xymon	Version 4.3.10
Xymon Xymon	Version 4.3.11
Xymon Xymon	Version 4.3.12
Xymon Xymon	Version 4.3.13
Xymon Xymon	Version 4.3.14
Xymon Xymon	Version 4.3.15
Xymon Xymon	Version 4.3.16
Xymon Xymon	Version 4.3.17
Xymon Xymon	Version 4.3.18
Xymon Xymon	Version 4.3.19
Xymon Xymon	Version 4.3.19 rc1
Xymon Xymon	Version 4.3.1
Xymon Xymon	Version 4.3.20
Xymon Xymon	Version 4.3.21
Xymon Xymon	Version 4.3.22
Xymon Xymon	Version 4.3.23
Xymon Xymon	Version 4.3.24
Xymon Xymon	Version 4.3.2
Xymon Xymon	Version 4.3.3
Xymon Xymon	Version 4.3.4
Xymon Xymon	Version 4.3.5
Xymon Xymon	Version 4.3.6
Xymon Xymon	Version 4.3.7
Xymon Xymon	Version 4.3.8
Xymon Xymon	Version 4.3.9