VIR Vulnerability Intelligence Relay

CVE-2012-3448

high
Published 2012-08-06 · Modified 2026-04-29
CVSS v3
—
CVSS v2
7.5
VIR risk
7.5

Description

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2012-3448

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://secunia.com/advisories/50047

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://ganglia.info/?p=549

OS impact
OSVersionStatusFixed in
debian debianbookwormfixed3.3.8-1
debian debianbullseyefixed3.3.8-1
debian debiansidfixed3.3.8-1

Application impact
VendorProductVersionsFixed
gangliaganglia-web{"endIncluding":"3.5.0"}
gangliaganglia-web2.1.0
gangliaganglia-web2.1.1
gangliaganglia-web2.1.2
gangliaganglia-web2.1.3
gangliaganglia-web2.1.5
gangliaganglia-web2.1.6
gangliaganglia-web2.1.7
gangliaganglia-web2.1.8
gangliaganglia-web2.2.0
gangliaganglia-web3.3.0
gangliaganglia-web3.3.1
gangliaganglia-web3.4.1
gangliaganglia-web3.4.2

References

Verify integrity in audit chain (admin only). AS-IS.