#VU33059 Input validation error - CVE-2017-6188

Vulnerability identifier: #VU33059

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2017-6188

CWE-ID: CWE-20

Exploitation vector: Local

Exploit availability: No

Description

The vulnerability allows a local authenticated user to manipulate data.

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET parameters allows overwriting any file accessible to the www-data user.

Mitigation
Install update from vendor's website.

External links
https://www.securityfocus.com/bid/96399
https://bugs.debian.org/855705
https://github.com/munin-monitoring/munin/issues/721
https://security.gentoo.org/glsa/201710-05
https://www.debian.org/security/2017/dsa-3794

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.