ganglia.infoConfirmation
http://ganglia.info/?p=549 CVE-2012-3448
Ganglia Web Frontend < 3.5.1 - PHP Code Execution
Record summary
CVE-2012-3448 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBGanglia Web Frontend < 3.5.1 - PHP Code ExecutionExploitDB exploitby Andrei CostinNot analyzed1 file
References
12FEDORA-2012-10727Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084196.html FEDORA-2012-10699Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084202.html 50047Third-party advisory
http://secunia.com/advisories/50047 DSA-2610Vendor advisory
http://www.debian.org/security/2013/dsa-2610 [oss-security] 20120801 Re: CVE request: Ganglia Web 3.5.1mailing list
http://www.openwall.com/lists/oss-security/2012/08/02/1 54699vdb entry
http://www.securityfocus.com/bid/54699 bugs.gentoo.org
https://bugs.gentoo.org/show_bug.cgi?id=428776 bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=845124 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2012-3448 38030exploit
https://www.exploit-db.com/exploits/38030 intel.comConfirmation
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00136.html