CVE-2012-3512
Munin before 2.0.6 stores plugin state files that run as root in the same group-writable...
Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.
Exploit likelihood
What each source reports
NVD Score used
Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.
- Record
CVE-2012-3512- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.
- Record
CVE-2012-3512- Updated
- 2026-11-02
EUVDEUVD-2012-3467 No score
Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.
- Record
EUVD-2012-3467- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g93j-j4g4-hr9q No score
Munin before 2.0.6 stores plugin state files that run as root in the same group-writable...
Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.
- Record
GHSA-g93j-j4g4-hr9q- Updated
- 2026-11-02
OSV No score
Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.
- Record
CVE-2012-3512- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3512 No score
Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.
- Record
DEBIAN-CVE-2012-3512- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3512 is a high vulnerability (CVSS 7.2) in Munin-monitoring Munin, published November 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. Fixed in munin 2.0.6-1.
References
lists.fedoraproject.org/pipermail/package-announce/2012-September/088260.html
ubuntu.com/usn/USN-1622-1
openwall.com/lists/oss-security/2012/08/21/1
munin-monitoring.org/ticket/1234