CVE-2012-3448
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute...
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
- Record
CVE-2012-3448- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
- Record
CVE-2012-3448- Updated
- 2026-11-02
EUVDEUVD-2012-3410 No score
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
- Record
EUVD-2012-3410- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qv5c-fqrv-r4vp No score
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute...
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
- Record
GHSA-qv5c-fqrv-r4vp- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
- Record
CVE-2012-3448- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3448 No score
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
- Record
DEBIAN-CVE-2012-3448- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-3448 No score
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
- Record
UBUNTU-CVE-2012-3448- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gangliaDebian:12 |
before 3.3.8-1 | 3.3.8-1 |
gangliaDebian:14 |
before 3.3.8-1, plus listed versions 3.1.0-13.1.1-13.1.1-23.1.1-33.1.2-1 Show 10 moreShow less3.1.2-23.1.2-2.13.1.2-33.1.2-3.13.1.7-13.1.7-1+squeeze13.1.7-23.1.7-2.13.3.5-13.3.5-2 |
3.3.8-1 |
gangliaDebian:6.0 |
before 3.1.7-1+squeeze1, plus listed versions 3.1.7-1 |
3.1.7-1+squeeze1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Ganglia Web Frontend < 3.5.1 - PHP Code Execution | 2015-08-31 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3448 is a high vulnerability (CVSS 7.5) in Ganglia Ganglia-web, published August 6, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.94%, the 95th percentile. Fixed in ganglia 3.3.8-1.
References
securityfocus.com/bid/54699
lists.fedoraproject.org/pipermail/package-announce/2012-July/084196.html
exploit-db.com/exploits/38030
openwall.com/lists/oss-security/2012/08/02/1
bugzilla.redhat.com/show_bug.cgi?id=845124
Show 11 moreShow less
intel.com/content/www/us/en/security-center/advisory/intel-sa-00136.html
debian.org/security/2013/dsa-2610
secunia.com/advisories/50047
bugs.gentoo.org/show_bug.cgi?id=428776
ganglia.info?p=549
nvd.nist.gov/vuln/detail/CVE-2012-3448
github.com/advisories/GHSA-qv5c-fqrv-r4vp
security-tracker.debian.org/tracker/CVE-2012-3448
ubuntu.com/security/CVE-2012-3448
cve.org/CVERecord?id=CVE-2012-3448