Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xymon xymond 命令注入漏洞
Vulnerability Description
Xymon是一套开源的、跨平台的网络监控应用程序。该应用程序可通过网页查看各服务器的运行状态，并支持Email及短信通知功能。xymond是其中的一个用于Xymon服务器的网络守护进程。 Xymon的xymond中存在安全漏洞。远程攻击者可借助web/useradm.c或web/chpasswd.c文件中的‘adduser_name’参数中的shell元字符利用该漏洞执行任意命令。以下版本受到影响：Xymon 4.1.x版本，4.2.x版本，4.3.25之前4.3.x版本。
CVSS Information
N/A
Vulnerability Type
N/A