Oval Definition:
oval:com.ubuntu.cosmic:def:201620570000000
Revision Date
:
2016-04-13
Version
:
1
Title
:
CVE-2016-2057 on Ubuntu 18.10 (cosmic) - medium.
Description
:
lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2016-2057
Platform(s)
:
Ubuntu 18.10
Product(s)
:
Definition Synopsis
Ubuntu 18.10 (cosmic) is installed.
AND
xymon package in cosmic, is related to the CVE in some way and has been fixed (note: '4.3.25-1').
BACK