CVE-2013-4173

EPSS 0.71%

Published: 10/11/2013Modified: 4/28/2026

Also known as:DEBIAN-CVE-2013-4173

Description

Directory traversal vulnerability in the trend-data daemon (xymond_rrd) in Xymon 4.x before 4.3.12 allows remote attackers to delete arbitrary files via a .. (dot dot) in the host name in a "drophost" command.

Affected packages (1)

Debian/xymonfrom 0, < 4.3.17-2

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2013-4173