CVE-2016-2055

Published: Apr 13, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config" command.

Affected (44)

Products: Xymon: Xymon · Debian: Debian Linux

1 product

1 product

Configuration A

43 vulnerable

Vulnerable Software	Affected Versions
Xymon Xymon	Version 4.1.0
Xymon Xymon	Version 4.1.1
Xymon Xymon	Version 4.1.2
Xymon Xymon	Version 4.1.2 p1
Xymon Xymon	Version 4.1.2 p2
Xymon Xymon	Version 4.2.0
Xymon Xymon	Version 4.2.2
Xymon Xymon	Version 4.2.2 rc1
Xymon Xymon	Version 4.2.3
Xymon Xymon	Version 4.2.3 rc1
Xymon Xymon	Version 4.2 alfa
Xymon Xymon	Version 4.2 beta20060605
Xymon Xymon	Version 4.2 rc20060712
Xymon Xymon	Version 4.3.0
Xymon Xymon	Version 4.3.0 beta1
Xymon Xymon	Version 4.3.0 beta2
Xymon Xymon	Version 4.3.0 beta3
Xymon Xymon	Version 4.3.0 rc1
Xymon Xymon	Version 4.3.10
Xymon Xymon	Version 4.3.11
Xymon Xymon	Version 4.3.12
Xymon Xymon	Version 4.3.13
Xymon Xymon	Version 4.3.14
Xymon Xymon	Version 4.3.15
Xymon Xymon	Version 4.3.16
Xymon Xymon	Version 4.3.17
Xymon Xymon	Version 4.3.18
Xymon Xymon	Version 4.3.19
Xymon Xymon	Version 4.3.19 rc1
Xymon Xymon	Version 4.3.1
Xymon Xymon	Version 4.3.20
Xymon Xymon	Version 4.3.21
Xymon Xymon	Version 4.3.22
Xymon Xymon	Version 4.3.23
Xymon Xymon	Version 4.3.24
Xymon Xymon	Version 4.3.2
Xymon Xymon	Version 4.3.3
Xymon Xymon	Version 4.3.4
Xymon Xymon	Version 4.3.5
Xymon Xymon	Version 4.3.6
Xymon Xymon	Version 4.3.7
Xymon Xymon	Version 4.3.8
Xymon Xymon	Version 4.3.9