CVE-2013-4173

EPSS 0.71%

發布日:2013/10/11修改日:2026/4/28

也稱為:DEBIAN-CVE-2013-4173

描述

Directory traversal vulnerability in the trend-data daemon (xymond_rrd) in Xymon 4.x before 4.3.12 allows remote attackers to delete arbitrary files via a .. (dot dot) in the host name in a "drophost" command.

受影響套件(1)

Debian/xymonfrom 0, < 4.3.17-2

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2013-4173