CVE-2016-2055

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

17.85%

Published

Apr 13, 2016

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config" command.

Weaknesses (CWE)

CWE-200

Affected Products (44)

xymon · xymonvulnerable

xymon · xymon

References (8)

http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html

http://www.debian.org/security/2016/dsa-3495

http://www.securityfocus.com/archive/1/537522/100/0/threaded

https://sourceforge.net/p/xymon/code/7890/

Patch

http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html

http://www.debian.org/security/2016/dsa-3495

http://www.securityfocus.com/archive/1/537522/100/0/threaded

https://sourceforge.net/p/xymon/code/7890/

KEV Catalog EPSS Scores Vendors All CVEs