tags 668536 + upstream
thanks
Hi Helmut,
many thanks for filing this bug report!
On Donnerstag, 12. April 2012, Helmut Grohne wrote:
> /usr/lib/cgi-bin/munin-cgi-graph uses predictable filenames in /tmp
> which might allow privilege escalation to www-data or denial of serving
> graphs. The filen
Package: munin
Version: 2.0~rc4-1
Severity: important
Tags: security
/usr/lib/cgi-bin/munin-cgi-graph uses predictable filenames in /tmp
which might allow privilege escalation to www-data or denial of serving
graphs. The filenames always start with /tmp/munin-cgi-graph/.
At the moment this issue
2 matches
Mail list logo