CVE-2012-2104

Munin 2.x - Remote Code Execution via Terminal Emulator Escape Sequence Injection

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-2104. PoCs published by Helmut Grohne.

AI-analyzed exploit summary This exploit leverages a command injection vulnerability in Munin's CGI graph component by injecting newline characters into the URL path, allowing arbitrary command execution. The PoC sends a crafted HTTP GET request to trigger the vulnerability.

Description

cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Helmut Grohne · textwebappscgi

https://www.exploit-db.com/exploits/37084

View Code ZIP pw:eip

This exploit leverages a command injection vulnerability in Munin's CGI graph component by injecting newline characters into the URL path, allowing arbitrary command execution. The PoC sends a crafted HTTP GET request to trigger the vulnerability.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Munin (versions prior to fix for CVE-2012-2104)

No auth needed

Prerequisites: Munin with vulnerable CGI graph component exposed · Network access to the target

MITRE ATT&CK