tocsin

Debian/xymon: critical 9.8

In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by sending a crafted GET request that triggers an sprintf of the srcdb paramete

Action: Upgrade xymon to 4.3.29-1 or later.

Affected

introducedfixedlast affected
04.3.29-1-

Fixed versions

4.3.29-1

Sources

published · modified · JSON