In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by sending a crafted GET request that triggers an sprintf of the srcdb parameter.
| Software | From | Fixed in |
|---|---|---|
| xymon / xymon | - | 4.3.28.x |
| debian / debian_linux | 8.0 | 8.0.x |