ByteOS Network

CVE Vulnerability Details :

CVE-2012-10048

PUBLISHED

More Info Official Page

Assigner-VulnCheck

Assigner Org ID-83251b91-4cc7-4094-a5c7-464a1b83ea10

Published At-08 Aug, 2025 | 18:14

Updated At-08 Aug, 2025 | 18:42

▼CVE Numbering Authority (CNA)

Zenoss 3.x showDaemonXMLConfig Command Execution

Zenoss Core 3.x contains a command injection vulnerability in the showDaemonXMLConfig endpoint. The daemon parameter is passed directly to a Popen() call in ZenossInfo.py without proper sanitation, allowing authenticated users to execute arbitrary commands on the server as the zenoss user.

Affected Products

Vendor

Zenoss, Inc.

Product

Zenoss Core

Modules

/zport/About/showDaemonXMLConfig

Default Status

unaffected

Versions

Affected

Problem Types

Type	CWE ID	Description
CWE	CWE-22	CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Metrics

Version	Base score	Base severity	Vector
4.0	8.7	HIGH	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Impacts

CAPEC ID	Description
CAPEC-126	CAPEC-126 Path Traversal

Credits

finder

bcoles

References

Hyperlink	Resource
https://www.exploit-db.com/exploits/20205	exploit
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/zenoss_showdaemonxmlconfig_exec.rb	exploit
https://www.exploit-db.com/exploits/37571	exploit
http://web.archive.org/web/20221203180334/https://itsecuritysolutions.org/2012-07-30-zenoss-3.2.1-multiple-security-vulnerabilities/	technical-description exploit
https://sourceforge.net/projects/zenoss/	product
https://www.vulncheck.com/advisories/zenoss-command-execution	third-party-advisory

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References