xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacte…

Published 10 y ago 2016-04-13 · modified 4 mo ago 2026-06-17 · JSON

CVSS

8.8

v3.0 · NVD

CISA KEV

not known exploited

EPSS

54.5%

percentile 99%

Public exploits

Metasploit · Exploit-DB

xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c.

Exploit prediction (EPSS)

54.51% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

Metasploit exploit/unix/webapp/xymon_useradm_cmd_exec Xymon useradm Command Execution · metasploit exploit, excellent rank · 2016-02-14
EDB-47114 Xymon 4.3.25 - useradm Command Execution (Metasploit) · remote · 2019-07-12

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	8.8	`CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	6.5	`AV:N/AC:L/Au:S/C:P/I:P/A:P`

Classification

Weakness

CWE-77 Improper Neutralization of Special Elements used in a Command

References

securityfocus.com /archive/1/537522/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
sourceforge.net /p/xymon/code/7892/ · x_refsource_CONFIRM, x_transferred
debian.org /security/2016/dsa-3495 · vendor-advisory, x_refsource_DEBIAN, x_transferred
packetstormsecurity.com /files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html · x_refsource_MISC, x_transferred
packetstormsecurity.com /files/153620/Xymon-useradm-Command-Execution.html · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2016-2056
NVD: CVE-2016-2056

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.