CVE-2012-3512 - CVE House
Back to Database
Status published High CVE-2012-3512

Munin before 2.0.6 stores plugin state files that run as...

Vulnerability Description

Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-3512

Credits & Attribution

No credits recorded in the NVD database.

References

More from munin-monitoring

View All →
CVE-2017-6188
Munin before 2.999.6 has a local file write vulnerability when...
Medium 5.5
CVE-2013-6359
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause...
Medium 4.3
CVE-2013-6048
The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows...
Medium 5
CVE-2012-4678
munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files,...
Medium 5
CVE-2012-3513
munin-cgi-graph in Munin before 2.0.6, when running as a CGI...
Critical 9.3

Affected Vendor

munin-monitoring

View all reports →

Affected Software

munin
Vulnerable Versions:
0, 2.0-beta1, 2.0-beta2, 2.0-beta3, 2.0-beta4, 2.0-beta5, 2.0-beta6, 2.0-beta7, 2.0-rc1, 2.0-rc2, 2.0-rc3, 2.0-rc4, 2.0-rc5, 2.0-rc6, 2.0-rc7, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4

Timeline

Official Publish: November 21st, 2012
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.