CVE-2013-4173: Directory traversal vulnerability in the trend-data daemon (xymond_rrd) in Xymon 4.x before 4.3.12 allows r...

Security readout for executives and security teams

CVE-2013-4173 is a directory traversal flaw in Xymon's trend-data daemon. A remote attacker could cause arbitrary file deletion by abusing host-name handling in a management command. The sources identify affected Xymon 4.x versions before 4.3.12, but do not provide CVSS scoring or exploitation evidence. Exposure is most likely where Xymon 4.x before 4.3.12 is still deployed, especially on monitoring servers running xymond_rrd. Internet exposure is not established by the sources. File deletion impact depends on daemon permissions and local deployment layout. Treat this as a cleanup and legacy exposure risk. Prioritize if Xymon remains in production, especially on shared or business-critical monitoring servers. Lack of active exploitation evidence lowers urgency, but remote arbitrary file deletion can disrupt monitoring integrity and availability. Mitigation focus: Upgrade Xymon to 4.3.12 or later where available.; Apply relevant distribution security updates, including Mandriva guidance if applicable.; Restrict access to Xymon management interfaces and trusted monitoring networks..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.