CVE-2016-2057

Published: Apr 13, 2016Modified: May 6, 2026

3.3

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue.

Affected (44)

Products: Xymon: Xymon · Debian: Debian Linux

1 product

1 product

Configuration A

43 vulnerable

Vulnerable Software	Affected Versions
Xymon Xymon	Version 4.1.0
Xymon Xymon	Version 4.1.1
Xymon Xymon	Version 4.1.2
Xymon Xymon	Version 4.1.2 p1
Xymon Xymon	Version 4.1.2 p2
Xymon Xymon	Version 4.2.0
Xymon Xymon	Version 4.2.2
Xymon Xymon	Version 4.2.2 rc1
Xymon Xymon	Version 4.2.3
Xymon Xymon	Version 4.2.3 rc1
Xymon Xymon	Version 4.2 alfa
Xymon Xymon	Version 4.2 beta20060605
Xymon Xymon	Version 4.2 rc20060712
Xymon Xymon	Version 4.3.0
Xymon Xymon	Version 4.3.0 beta1
Xymon Xymon	Version 4.3.0 beta2
Xymon Xymon	Version 4.3.0 beta3
Xymon Xymon	Version 4.3.0 rc1
Xymon Xymon	Version 4.3.10
Xymon Xymon	Version 4.3.11
Xymon Xymon	Version 4.3.12
Xymon Xymon	Version 4.3.13
Xymon Xymon	Version 4.3.14
Xymon Xymon	Version 4.3.15
Xymon Xymon	Version 4.3.16
Xymon Xymon	Version 4.3.17
Xymon Xymon	Version 4.3.18
Xymon Xymon	Version 4.3.19
Xymon Xymon	Version 4.3.19 rc1
Xymon Xymon	Version 4.3.1
Xymon Xymon	Version 4.3.20
Xymon Xymon	Version 4.3.21
Xymon Xymon	Version 4.3.22
Xymon Xymon	Version 4.3.23
Xymon Xymon	Version 4.3.24
Xymon Xymon	Version 4.3.2
Xymon Xymon	Version 4.3.3
Xymon Xymon	Version 4.3.4
Xymon Xymon	Version 4.3.5
Xymon Xymon	Version 4.3.6
Xymon Xymon	Version 4.3.7
Xymon Xymon	Version 4.3.8
Xymon Xymon	Version 4.3.9