CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
4.7 | $0-$5k | 0.00 |
A vulnerability, which was classified as critical, has been found in munin. Affected by this issue is an unknown code of the component CGI Graph Handler. The manipulation of the argument upper_limit
with an unknown input leads to a access control vulnerability (File). Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is integrity, and availability. CVE summarizes:
Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET parameters allows overwriting any file accessible to the www-data user.
The bug was discovered 02/21/2017. The weakness was published 02/22/2017 (Website). The advisory is shared for download at bugs.debian.org. This vulnerability is handled as CVE-2017-6188 since 02/22/2017. The attack may be launched remotely. No form of authentication is required for exploitation. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1068.
The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $0-$5k. The vulnerability scanner Nessus provides a plugin with the ID 97398 (Debian DSA-3794-1 : munin - security update), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Debian Local Security Checks and running in the context l.
Upgrading to version 2.999.6 eliminates this vulnerability. A possible mitigation has been published 3 days after the disclosure of the vulnerability.
The vulnerability is also documented in the vulnerability database at Tenable (97398). Similar entries are available at VDB-61896, VDB-61897, VDB-61899 and VDB-61901.
Product
Name
Version
- 1.4.5
- 2.0
- 2.0 Rc4
- 2.0-beta1
- 2.0-beta2
- 2.0-beta3
- 2.0-beta4
- 2.0-beta5
- 2.0-beta6
- 2.0-beta7
- 2.0-rc1
- 2.0-rc2
- 2.0-rc3
- 2.0-rc4
- 2.0-rc5
- 2.0-rc6
- 2.0-rc7
- 2.0.0
- 2.0.1
- 2.0.2
- 2.0.3
- 2.0.4
- 2.0.5
- 2.0.6
- 2.0.7
- 2.0.8
- 2.0.9
- 2.0.10
- 2.0.11
- 2.0.11.1
- 2.0.12
- 2.0.13
- 2.0.14
- 2.0.15
- 2.0.16
- 2.0.17
- 2.1
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 4.8VulDB Meta Temp Score: 4.7
VulDB Base Score: 4.2
VulDB Temp Score: 4.0
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 5.5
NVD Vector: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Name: FileClass: Access control / File
CWE: CWE-284 / CWE-266
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 97398
Nessus Name: Debian DSA-3794-1 : munin - security update
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
OpenVAS ID: 703794
OpenVAS Name: Debian Security Advisory DSA 3794-1 (munin - security update)
OpenVAS File: 🔍
OpenVAS Family: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Upgrade: munin 2.999.6
Timeline
02/21/2017 🔍02/22/2017 🔍
02/22/2017 🔍
02/22/2017 🔍
02/22/2017 🔍
02/23/2017 🔍
02/25/2017 🔍
02/27/2017 🔍
06/09/2022 🔍
Sources
Advisory: bugs.debian.orgStatus: Not defined
Confirmation: 🔍
CVE: CVE-2017-6188 (🔍)
OVAL: 🔍
SecurityFocus: 96399 - Munin CVE-2017-6188 Arbitrary File Overwrite Vulnerability
OSVDB: - CVE-2017-6188 - Munin - File Overwrite Issue
See also: 🔍
Entry
Created: 02/23/2017 09:45Updated: 06/09/2022 15:26
Replaces Duplicates: 🔍
Changes: 02/23/2017 09:45 (80), 06/09/2022 15:26 (3)
Complete: 🔍
Cache ID: 18:B36:103
No comments yet. Languages: en.
Please log in to comment.