| Package | Affected versions | Patched versions |
|---|---|---|
| zenoss core | < 4.2.5 | 4.2.5 |
Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted third argument to the rrdtool.graph function, aka ZEN-15415, a related issue to CVE-2013-2131.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free