CVE-2016-2056

Published: Apr 13, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c.

Affected (44)

Products: Xymon: Xymon · Debian: Debian Linux

1 product

1 product

Configuration A

43 vulnerable

Vulnerable Software	Affected Versions
Xymon Xymon	Version 4.1.0
Xymon Xymon	Version 4.1.1
Xymon Xymon	Version 4.1.2
Xymon Xymon	Version 4.1.2 p1
Xymon Xymon	Version 4.1.2 p2
Xymon Xymon	Version 4.2.0
Xymon Xymon	Version 4.2.2
Xymon Xymon	Version 4.2.2 rc1
Xymon Xymon	Version 4.2.3
Xymon Xymon	Version 4.2.3 rc1
Xymon Xymon	Version 4.2 alfa
Xymon Xymon	Version 4.2 beta20060605
Xymon Xymon	Version 4.2 rc20060712
Xymon Xymon	Version 4.3.0
Xymon Xymon	Version 4.3.0 beta1
Xymon Xymon	Version 4.3.0 beta2
Xymon Xymon	Version 4.3.0 beta3
Xymon Xymon	Version 4.3.0 rc1
Xymon Xymon	Version 4.3.10
Xymon Xymon	Version 4.3.11
Xymon Xymon	Version 4.3.12
Xymon Xymon	Version 4.3.13
Xymon Xymon	Version 4.3.14
Xymon Xymon	Version 4.3.15
Xymon Xymon	Version 4.3.16
Xymon Xymon	Version 4.3.17
Xymon Xymon	Version 4.3.18
Xymon Xymon	Version 4.3.19
Xymon Xymon	Version 4.3.19 rc1
Xymon Xymon	Version 4.3.1
Xymon Xymon	Version 4.3.20
Xymon Xymon	Version 4.3.21
Xymon Xymon	Version 4.3.22
Xymon Xymon	Version 4.3.23
Xymon Xymon	Version 4.3.24
Xymon Xymon	Version 4.3.2
Xymon Xymon	Version 4.3.3
Xymon Xymon	Version 4.3.4
Xymon Xymon	Version 4.3.5
Xymon Xymon	Version 4.3.6
Xymon Xymon	Version 4.3.7
Xymon Xymon	Version 4.3.8
Xymon Xymon	Version 4.3.9