| Package | Affected versions | Patched versions |
|---|---|---|
| xymon | = 4.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.1.0= 4.1.1= 4.1.2= 4.2.0= 4.2.2= 4.2.3= 4.3.0≤ 4.3.1 |
Directory traversal vulnerability in the trend-data daemon (xymond_rrd) in Xymon 4.x before 4.3.12 allows remote attackers to delete arbitrary files via a .. (dot dot) in the host name in a "drophost" command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free