CVE-2016-2054
CriticalSummary
Multiple buffer overflows in xymond/xymond.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long filename, involving handling a 'config' command.
Risk Assessment
This vulnerability poses a serious risk to organizations, allowing remote code execution or service disruption, which can lead to system downtime.
Recommendation
It is recommended to upgrade to Xymon version 4.3.25 or later to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long filename, involving handling a "config" command.