Vulnerability Database

318,389

Total vulnerabilities in the database

CVE-2012-3512

Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.

  • Published: Nov 21, 2012
  • Updated: Nov 9, 2025
  • CVE: CVE-2012-3512
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
munin-monitoring / munin 2.0.2 2.0.2.x
munin-monitoring / munin 2.0-beta3 2.0-beta3.x
munin-monitoring / munin 2.0-beta4 2.0-beta4.x
munin-monitoring / munin 2.0-rc3 2.0-rc3.x
munin-monitoring / munin 2.0-beta5 2.0-beta5.x
munin-monitoring / munin 2.0.1 2.0.1.x
munin-monitoring / munin - 2.0.5.x
munin-monitoring / munin 2.0-rc5 2.0-rc5.x
munin-monitoring / munin 2.0-beta2 2.0-beta2.x
munin-monitoring / munin 2.0-beta7 2.0-beta7.x
munin-monitoring / munin 2.0-rc6 2.0-rc6.x
munin-monitoring / munin 2.0-rc1 2.0-rc1.x
munin-monitoring / munin 2.0.0 2.0.0.x
munin-monitoring / munin 2.0-beta1 2.0-beta1.x
munin-monitoring / munin 2.0-rc7 2.0-rc7.x
munin-monitoring / munin 2.0.3 2.0.3.x
munin-monitoring / munin 2.0-rc2 2.0-rc2.x
munin-monitoring / munin 2.0-rc4 2.0-rc4.x
munin-monitoring / munin 2.0-beta6 2.0-beta6.x
munin-monitoring / munin 2.0.4 2.0.4.x