CVE-2012-3441
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1...
CVE-2012-3441 is a high vulnerability (CVSS 7.5) in Icinga, published August 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.41%, the 84th percentile. No source names a fixed version.
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
- Record
CVE-2012-3441- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
- Record
CVE-2012-3441- Updated
- 2026-11-02
EUVDEUVD-2012-3408 No score
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
- Record
EUVD-2012-3408- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rpmx-xcm7-5crg No score
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1...
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
- Record
GHSA-rpmx-xcm7-5crg- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
openwall.com/lists/oss-security/2012/07/30/7
git.icinga.org?p=icinga-core.git%3Ba=commitdiff%3Bh=dcd45fb6931c4abf710829bee21af09f842bc281
exchange.xforce.ibmcloud.com/vulnerabilities/78874
Show 7 moreShow less
lists.opensuse.org/opensuse-updates/2012-08/msg00012.html
bugzilla.novell.com/show_bug.cgi?id=767319
nvd.nist.gov/vuln/detail/CVE-2012-3441
github.com/advisories/GHSA-rpmx-xcm7-5crg