| Package | Affected versions | Patched versions |
|---|---|---|
| xymon | = 4.1.0= 4.1.1= 4.1.2= 4.2= 4.2.0= 4.2.2= 4.2.3= 4.3.0= 4.3.1= 4.3.10= 4.3.11= 4.3.12= 4.3.13= 4.3.14= 4.3.15= 4.3.16= 4.3.17= 4.3.18= 4.3.19= 4.3.2= 4.3.20= 4.3.21= 4.3.22= 4.3.23= 4.3.24= 4.3.3= 4.3.4= 4.3.5= 4.3.6= 4.3.7= 4.3.8= 4.3.9 |
xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free