Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.

The remote host is affected by the vulnerability described in GLSA-201412-10 (Multiple packages, Multiple vulnerabilities fixed in 2012)

    Vulnerabilities have been discovered in the packages listed below.
      Please review the CVE identifiers in the Reference section for details.
      EGroupware       VTE       Layer Four Traceroute (LFT)       Suhosin       Slock       Ganglia       Jabber to GaduGadu Gateway   Impact :

    A context-dependent attacker may be able to gain escalated privileges,       execute arbitrary code, cause Denial of Service, obtain sensitive       information, or otherwise bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

Insufficient input sanitization in Ganglia, a web-based monitoring system, could lead to remote PHP script execution with permissions of the user running the web server.

Fix for arbitrary PHP file execution

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
79963	GLSA-201412-10 : Multiple packages, Multiple vulnerabilities fixed in 2012	Nessus	Gentoo Local Security Checks	high
63640	Debian DSA-2610-1 : ganglia - arbitrary script execution	Nessus	Debian Local Security Checks	high
60123	Fedora 16 : ganglia-3.1.7-5.fc16 (2012-10727)	Nessus	Fedora Local Security Checks	high
60122	Fedora 17 : ganglia-3.1.7-6.fc17 (2012-10699)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2012-3448

critical

Tenable Plugins

high

high

high

high