Skip to main content

Munin CVE-2012-2103

LOW
Improper Link Resolution Before File Access (CWE-59)
2012-08-26 secalert@redhat.com
Information Disclosure Munin
1.2
CVSS 2.0 · NVD

Severity by source

NVD PRIMARY
1.2 LOW
AV:L/AC:H/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:H/Au:N/C:N/I:P/A:N
Attack Vector
Local
Attack Complexity
High
Confidentiality
None
Integrity
P
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 26, 2012 - 21:55 cve.org
LOW 1.2

DescriptionCVE.org

The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

AnalysisAI

The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names. Rated low severity (CVSS 1.2). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-59. The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names. Affected products include: Munin-Monitoring Munin.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Munin

View all
CVE-2012-3513 CRITICAL POC
9.3 Nov 21

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new co
CVE-2012-2104 MEDIUM POC
6.8 Aug 26

cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might

CVE-2012-3512 HIGH POC
7.2 Nov 21

Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins,

CVE-2017-6188 MEDIUM
5.5 Feb 22

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Rated medium severity (CVSS 5.5),
CVE-2012-4678 MEDIUM
5.0 Aug 26

munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of se
CVE-2012-2147 MEDIUM
5.0 Aug 26

munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via m
CVE-2013-6048 MEDIUM
5.0 Dec 13

The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a deni
CVE-2013-6359 MEDIUM
4.3 Dec 13

Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection f

Same weakness CWE-59 – Improper Link Resolution Before File Access

View all
CVE-2015-1130 HIGH POC
7.8
CVE-2026-41091 HIGH POC
7.8
CVE-2016-6664 HIGH POC
7.0
CVE-2025-60710 HIGH POC
7.8
CVE-2024-57728 HIGH POC
7.2
CVE-2025-21391 HIGH
7.1
CVE-2025-48384 HIGH
8.0
CVE-2024-28189 CRITICAL POC
10.0

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2012-2103 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy