Vulnerability Database

318,389

Total vulnerabilities in the database

CVE-2012-3513

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.

  • Published: Nov 21, 2012
  • Updated: Nov 9, 2025
  • CVE: CVE-2012-3513
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
munin-monitoring / munin 2.0.2 2.0.2.x
munin-monitoring / munin 2.0-beta3 2.0-beta3.x
munin-monitoring / munin 2.0-beta4 2.0-beta4.x
munin-monitoring / munin 2.0-rc3 2.0-rc3.x
munin-monitoring / munin 2.0-beta5 2.0-beta5.x
munin-monitoring / munin 2.0.1 2.0.1.x
munin-monitoring / munin - 2.0.5.x
munin-monitoring / munin 2.0-rc5 2.0-rc5.x
munin-monitoring / munin 2.0-beta2 2.0-beta2.x
munin-monitoring / munin 2.0-beta7 2.0-beta7.x
munin-monitoring / munin 2.0-rc6 2.0-rc6.x
munin-monitoring / munin 2.0-rc1 2.0-rc1.x
munin-monitoring / munin 2.0.0 2.0.0.x
munin-monitoring / munin 2.0-beta1 2.0-beta1.x
munin-monitoring / munin 2.0-rc7 2.0-rc7.x
munin-monitoring / munin 2.0.3 2.0.3.x
munin-monitoring / munin 2.0-rc2 2.0-rc2.x
munin-monitoring / munin 2.0-rc4 2.0-rc4.x
munin-monitoring / munin 2.0-beta6 2.0-beta6.x
munin-monitoring / munin 2.0.4 2.0.4.x