CVE-2016-2057: Low severity xymon vulnerability

Published Apr 13, 2016

Updated

lib/xymondipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue.

Affected Software

44 affected components

Xymon xymon=4.1.0

Xymon xymon=4.1.1

Xymon xymon=4.1.2

Xymon xymon=4.1.2-p1

Xymon xymon=4.1.2-p2

Xymon xymon=4.2-alfa

Xymon xymon=4.2-beta20060605

Xymon xymon=4.2-rc20060712

Xymon xymon=4.2.0

Xymon xymon=4.2.2

Xymon xymon=4.2.2-rc1

Xymon xymon=4.2.3

Xymon xymon=4.2.3-rc1

Xymon xymon=4.3.0

Xymon xymon=4.3.0-beta1

Xymon xymon=4.3.0-beta2

Xymon xymon=4.3.0-beta3

Xymon xymon=4.3.0-rc1

Xymon xymon=4.3.1

Xymon xymon=4.3.2

Xymon xymon=4.3.3

Xymon xymon=4.3.4

Xymon xymon=4.3.5

Xymon xymon=4.3.6

Xymon xymon=4.3.7

Xymon xymon=4.3.8

Xymon xymon=4.3.9

Xymon xymon=4.3.10

Xymon xymon=4.3.11

Xymon xymon=4.3.12

Xymon xymon=4.3.13

Xymon xymon=4.3.14

Xymon xymon=4.3.15

Xymon xymon=4.3.16

Xymon xymon=4.3.17

Xymon xymon=4.3.18

Xymon xymon=4.3.19

Xymon xymon=4.3.19-rc1

Xymon xymon=4.3.20

Xymon xymon=4.3.21

Xymon xymon=4.3.22

Xymon xymon=4.3.23

Xymon xymon=4.3.24

Debian Debian Linux=8.0

Remediation

Patch Available

https://sourceforge.net/p/xymon/code/7891/

Event History

Apr 13, 2016

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-2057?

CVE-2016-2057 is classified as a medium severity vulnerability due to weak permissions allowing local users to inject arbitrary messages.

How do I fix CVE-2016-2057?

Fix CVE-2016-2057 by updating Xymon to version 4.3.25 or later to ensure proper permissions are set on the IPC message queue.

What versions of Xymon are affected by CVE-2016-2057?

CVE-2016-2057 affects Xymon versions 4.1.x, 4.2.x, and 4.3.x before version 4.3.25.

Can CVE-2016-2057 be exploited remotely?

CVE-2016-2057 cannot be exploited remotely as it requires local access for users to inject messages.

What type of attack can CVE-2016-2057 facilitate?

CVE-2016-2057 can facilitate message injection attacks by allowing unauthorized local users to interfere with IPC message queues.