CVE-2012-2103
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a...
CVE-2012-2103 is a low vulnerability (CVSS 1.2) in Munin-monitoring Munin, published August 26, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. Fixed in munin 2.0~rc6-1.
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Exploit likelihood
What each source reports
NVD Score used
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
- Record
CVE-2012-2103- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:N/I:P/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
- Record
CVE-2012-2103- Updated
- 2026-11-02
EUVDEUVD-2012-2106 No score
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
- Record
EUVD-2012-2106- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wp9g-5pp9-hxcm No score
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a...
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
- Record
GHSA-wp9g-5pp9-hxcm- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
- Record
CVE-2012-2103- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2103 No score
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
- Record
DEBIAN-CVE-2012-2103- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |