CVE-2012-3513
munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote...
munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.
Exploit likelihood
What each source reports
NVD Score used
munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.
- Record
CVE-2012-3513- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.
- Record
CVE-2012-3513- Updated
- 2026-11-02
EUVDEUVD-2012-3468 No score
munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.
- Record
EUVD-2012-3468- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cfmj-pc5v-pwv8 No score
munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote...
munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.
- Record
GHSA-cfmj-pc5v-pwv8- Updated
- 2026-11-02
OSV No score
munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.
- Record
CVE-2012-3513- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3513 No score
munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.
- Record
DEBIAN-CVE-2012-3513- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3513 is a high vulnerability (CVSS 9.3) in Munin-monitoring Munin, published November 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.37%, the 83rd percentile. Fixed in munin 2.0.6-1.